Age: 0
Last-Modified: Wed, 26 Apr 2017 13:23:57 GMT
X-Frame-Options: SAMEORIGIN
Date: Wed, 21 Jun 2017 03:09:14 GMT
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.orange.ro *.orange.com *.google-analytics.com *.google.com *.googleapis.com www.gstatic.com cdn.optimizely.com *.googletagmanager.com *.googleadservices.com *.adnxs.com *.facebook.com *.facebook.net *.francetelecom.com w.usabilla.com *.chargeplatform.com *.omniconvert.com *.chargeads.com *.onesignal.com onesignal.com script.crazyegg.com *.doubleclick.net *.gemius.pl *.hotjar.com *.innertrends.com d2tgfbvjf3q6hn.cloudfront.net sb.scorecardresearch.com code.jquery.com cdn.jsdelivr.net innertrends.s3.amazonaws.com code.angularjs.org static.customersaas.com *.newrelic.com; style-src * data: 'unsafe-inline' blob: *.google.com *.orange.ro; img-src 'self' data: *.orange.ro *.orangeromania.ro www.facebook.com *.google.com *.google.ro *.gstatic.com *.doubleclick.net *.google-analytics.com *.googleapis.com *.googleadservices.com *.adocean.pl sp.analytics.yahoo.com w.usabilla.com d6tizftlrpuof.cloudfront.net sdc.francetelecom.com m-orange.count.brat-online.ro babel.innertrends.com *.hotjar.com img.youtube.com gtrk.s3.amazonaws.com; font-src 'self' *.orange.ro fonts.gstatic.com maxcdn.bootstrapcdn.com; connect-src 'self' *.orange.ro app.omniconvert.com onesignal.com gdero.hit.gemius.pl *.hotjar.com www.googleapis.com; frame-src *.orange.ro *.hotjar.com gdero.hit.gemius.pl www.google.ro *.google.com creativecdn.com *.creativecdn.com *.doubleclick.net *.facebook.com www.youtube.com;object-src 'self';form-action *.orange.ro; report-uri https://orange.report-uri.io/r/default/csp/reportOnly
Content-Type: text/html
Pragma: no-cache
Server: nginx/1.8.0
X-Request-Id: 4c05d43c7b5e5a7b5b136d85a1cac359
X-Cache: MISS
Via: 1.1 varnish-v4
Set-Cookie: BIGipServerstatic_40net_pool=rd5o00000000000000000000ffffac123405o80; path=/
X-Content-Type-Options: nosniff
Connection: close
X-Xss-Protection: 1; mode=block
Content-Security-Policy: frame-ancestors 'self' *.orange.ro
X-Varnish: 92155071