HTTP/1.1 200 OK
Server: openresty
Date: Mon, 26 Aug 2019 16:16:37 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Set-Cookie: _tomesto_session=MklsNFJoQjY1SzN5V3dleHFKYVlrSmR4aVpiWWQzV3FLL2VIb05VZnNkdTFnS3g5emt5cndvN1JuZ1hSbm1COWJ6cVYxNmtoMFFwWEhibWNpazFlNVlxTTBkQU9XZzNnOVB6MWtZNURCclY4Q3VkaTZ4aTUwdzRWcHNsOTFrQjlkczNvRGFzOXBYcGpvVnNwTlBJdEo3N2w1L3NlRGlKNFY1VEJmWXFvRGJqbWlrNWJhT0NMT0M0cGpkTUhHM2YxZFdZdHlxZkVKQzhDaWpUY2pnTlF1UCtQSW1xRnJ1UU5xeFFBZmZ1dXVCQmJjOG9SUHVFdml2WXBlZEFjZ3JuR3dlc1lQaHo5ZjgrWXhkNm1JWjBZOHc9PS0tNWdta3dvWTVCSXBhajJDY005NXJKdz09--a9f0511864a47df38e5ad4277885f1ddf6805062; domain=brisketrest.ru; path=/; secure; HttpOnly; SameSite=Lax
X-Request-Id: 81221aab-6e41-4056-b68d-3b44b971b12b
X-Runtime: 0.109653
Content-Security-Policy-Report-Only: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src youtube.com youtube-nocookie.com www.google.com www.facebook.com staticxx.facebook.com mc.yandex.ru; connect-src 'self' tomesto.ru wss://api.tomesto.ru api.tomesto.ru www.google-analytics.com stats.g.doubleclick.net *.bugsnag.com api.mixpanel.com mxpnl.net www.facebook.com/tr/ mc.yandex.ru top-fwz1.mail.ru dadata.ru/api/ formgeek.net; font-src 'self' fonts.gstatic.com data:; form-action 'self' www.facebook.com/tr/; img-src 'self' data: https:; manifest-src 'none'; media-src 'self' tomesto.ru *.tomesto.ru; object-src 'self'; plugin-types application/pdf; script-src 'self' 'unsafe-inline' 'unsafe-eval' tomesto.ru *.tomesto.ru www.google-analytics.com d2wy8f7a9ursnm.cloudfront.net mc.yandex.ru connect.facebook.net top-fwz1.mail.ru formgeek.net cdn.mxpnl.com maps.google.com maps.googleapis.com js-agent.newrelic.com bam.nr-data.net dadata.ru/static/; style-src 'self' 'unsafe-inline' tomesto.ru *.tomesto.ru fonts.googleapis.com dadata.ru/static/; worker-src 'none'; report-uri https://api.tomesto.ru/csp_report
Vary: Origin
X-Frame-Options: DENY
Strict-Transport-Security: max-age=3600
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block