Cache-Control: no-cache Server: nginx/1.10.3 Connection: keep-alive Strict-Transport-Security: max-age=31104000 Set-Cookie: user_tracker=c9d224f7cd74e5af1d2c673cbb574685a0f50800|62.75.137.71|2017-06-04; Domain=.prom.ua; Path=/ Content-Length: 200160 X-Content-Type-Options: nosniff Date: Sat, 03 Jun 2017 23:41:48 GMT HTTP/1.1 200 OK Pragma: no-cache Set-Cookie: auth=4d1171db0bef39f30e8399e283584cb77a595c02; Domain=.prom.ua; Max-Age=31536000; Path=/; expires=Sun, 03-Jun-2018 23:41:48 GMT; HttpOnly Set-Cookie: unauth=9d1a321bf731d086bcd73aaf80519c1ebf70c162; Domain=.prom.ua; Max-Age=31536000; Path=/; expires=Sun, 03-Jun-2018 23:41:48 GMT; HttpOnly Content-Type: text/html; charset=utf-8 Set-Cookie: csrf_token=b6450b86831147c49822eb18160d605c; Domain=.prom.ua; Max-Age=31449600; Path=/; expires=Sat, 02-Jun-2018 23:41:47 GMT Set-Cookie: cid=177675525085454703136284233020122831898; Max-Age=2592000; Path=/; expires=Mon, 03-Jul-2017 23:41:47 GMT X-XSS-Protection: 1; mode=block Set-cookie: prom=6575508408a8622b18979b3ba8486634ee7cdeea1d6bb3b8857540efb8a694f3020d6634; Domain=.prom.ua; httponly; Path=/ Content-Security-Policy-Report-Only: default-src 'self' *.prom.ua *.uaprom cdn.prom.st static-cache.ua.uaprom.net *.cloudfront.net counter.yadro.ru *.skype.com *.youtube.com *.youtu.be *.jivosite.com *.reformal.ru https: ws://*.hypercomments.com *.example.com 'unsafe-inline' 'unsafe-eval' *.yandex.ru *.yandex.net yandex.st *.doubleclick.net *.facebook.com *.facebook.net *.hypercomments.com *.siteheart.com yandex.st *.google.com *.googleapis.com *.googleadservices.com *.googletagservices.com *.google-analytics.com *.googlesyndication.com; img-src * data:; media-src *; style-src * 'unsafe-inline'; font-src *; connect-src *; report-uri https://prom.ua/js_tests/csp_report