HTTP/1.1 200 OK
Date: Thu, 16 May 2019 17:34:58 GMT
Server: Apache
Set-Cookie: AL_SESS-S=Ade722Avb7rEx_GcQGbINNoUorpsUgl5aGxzlCwNaJK!s!oJxu3rtU08JAM98XYdhJP6; Path=/;http-only; Domain=.bcf.ch; Secure; HttpOnly
X-Content-Type-Options: nosniff
Cache-Control: must-revalidate, no-cache, private
X-Drupal-Dynamic-Cache: HIT
X-UA-Compatible: IE=edge
Content-language: fr
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Vary: 
Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: cdn.jsdelivr.net maps.googleapis.com www.googletagmanager.com www.google-analytics.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' data: fonts.googleapis.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: maps.googleapis.com maps.gstatic.com csi.googleapis.com csi.gstatic.com khms0.googleapis.com khms1.googleapis.com www.google-analytics.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.youtube.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' data: themes.googleusercontent.com fonts.gstatic.com; report-uri /report-csp-violation
X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: cdn.jsdelivr.net maps.googleapis.com www.googletagmanager.com www.google-analytics.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' data: fonts.googleapis.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: maps.googleapis.com maps.gstatic.com csi.googleapis.com csi.gstatic.com khms0.googleapis.com khms1.googleapis.com www.google-analytics.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.youtube.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' data: themes.googleusercontent.com fonts.gstatic.com; report-uri /report-csp-violation
X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: cdn.jsdelivr.net maps.googleapis.com www.googletagmanager.com www.google-analytics.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' data: fonts.googleapis.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: maps.googleapis.com maps.gstatic.com csi.googleapis.com csi.gstatic.com khms0.googleapis.com khms1.googleapis.com www.google-analytics.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.youtube.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' data: themes.googleusercontent.com fonts.gstatic.com; report-uri /report-csp-violation
Strict-Transport-Security: max-age=16070400
X-XSS-Protection: 1; mode=block
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8