HTTP/1.1 200 OK
Server: nginx
Date: Sat, 18 May 2019 05:12:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Sat, 03 Aug 2013 00:00:00 GMT
Last-Modified: Sat, 18 May 2019 05:12:45 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: report-uri //csp.merlion.ru:8080/report/963066156255080967/; connect-src https://www.google-analytics.com https://*.yandex.ru http://www.google-analytics.com 'self' ; child-src 'none' ; font-src static.lc-group.ru 'self' ; form-action 'self' ; frame-ancestors webvisor.com *.webvisor.com ; frame-src *.youtube.com http://www.google-analytics.com https://*.yandex.ru 'self' ; img-src *.buro.ru static.lc-group.ru https://www.google-analytics.com https://*.webvisor.org data: https://*.yandex.ru http://www.google-analytics.com https://*.yandex.net *.merlion.com *.merlion.ru 'self' api-maps.yandex.ru *.maps.yandex.net ; media-src *.buro.ru static.lc-group.ru 'self' ; object-src *.buro.ru static.lc-group.ru 'self' ; script-src static.lc-group.ru 'unsafe-eval' http://www.googletagmanager.com https://www.google-analytics.com https://yandex.ru https://*.yandex.ru https://yastatic.net https://*.yandex.net 'self' *.google-analytics.com *.yandex.ru *.merlion.com ; style-src static.lc-group.ru 'self' *.merlion.com 'unsafe-inline' ; default-src 'none' ; strict-mixed-content-checking; reflected-xss filter; referrer origin-when-cross-origin;