X-XSS-Protection: 1; mode=block Access-Control-Allow-Methods: POST, GET, PUT, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, Pragma, Cache-Control, If-Modified-Since Front-End-Https: on Content-Type: text/html; charset=utf-8 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Accept-Ranges: bytes HTTP/1.1 200 OK Date: Fri, 16 Jun 2017 01:27:27 GMT Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=6048000 X-Content-Type-Options: nosniff Set-Cookie: PHPSESSID=douf22mmkitjbll76018q2so12; path=/; secure; HttpOnly Content-Length: 27005 Pragma: no-cache Expires: Thu, 19 Nov 1981 08:52:00 GMT Access-Control-Allow-Origin: https://hadawebshop.hu https://hadafashion.ro https://hadafashion.cz https://hadafashion.at https://hadafasion.sk https://hadafashion.pl https://hadafashion.hr Connection: keep-alive Set-Cookie: APP_LOCALE=pl_PL; path=/ X-Frame-Options: SAMEORIGIN