Cache-Control: no-cache Server: nginx/1.10.3 Connection: keep-alive Strict-Transport-Security: max-age=31104000 Set-Cookie: user_tracker=6705707652c229c336493bf106b9ee7c92330825|62.75.137.71|2017-06-18; Domain=.deal.by; Path=/ Content-Length: 85853 X-Content-Type-Options: nosniff Date: Sun, 18 Jun 2017 05:01:40 GMT HTTP/1.1 200 OK Pragma: no-cache Set-Cookie: auth=d6c99bc7f0bb96e58d5640fbf7ebea31b38dec09; Domain=.deal.by; Max-Age=31536000; Path=/; expires=Mon, 18-Jun-2018 05:01:40 GMT; HttpOnly Set-Cookie: unauth=1e13c8dcc3b0b10990e0e64b366439140094bf61; Domain=.deal.by; Max-Age=31536000; Path=/; expires=Mon, 18-Jun-2018 05:01:40 GMT; HttpOnly Content-Type: text/html; charset=utf-8 Set-Cookie: csrf_token=77cd292b831e401d9ccff640263807fe; Domain=.deal.by; Max-Age=31449600; Path=/; expires=Sun, 17-Jun-2018 05:01:40 GMT Set-Cookie: cid=180459115338738651834693125107310702742; Max-Age=2592000; Path=/; expires=Tue, 18-Jul-2017 05:01:39 GMT X-XSS-Protection: 1; mode=block Set-cookie: prom=6cc797f2b0ae8c6a185f3353445e3b60932a2f42f9ec09b51234461fb35674fe7a50e858; Domain=.deal.by; httponly; Path=/ Content-Security-Policy: default-src 'self' *.deal.by *.uaprom cdn.prom.st static-cache.by.uaprom.net *.cloudfront.net counter.yadro.ru *.skype.com *.youtube.com *.youtu.be *.jivosite.com *.reformal.ru https: ws://*.hypercomments.com *.example.com 'unsafe-inline' 'unsafe-eval' *.yandex.ru *.yandex.net yandex.st *.doubleclick.net *.facebook.com *.facebook.net *.hypercomments.com *.siteheart.com yandex.st *.google.com *.googleapis.com *.googleadservices.com *.googletagservices.com *.google-analytics.com *.googlesyndication.com; img-src * data:; media-src *; style-src * 'unsafe-inline'; font-src *; connect-src *; report-uri https://deal.by/js_tests/csp_report