HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Jun 2019 20:42:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: PHPSESSID=8328a9b2c08f298dd98cc3c6b5bde5ec; path=/; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Cache-control: public
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: report-uri //csp.merlion.ru:8080/report/441566962880210047/; connect-src 'self' *.yandex.ru *.yandex.net *.google-analytics.com https://*.yandex.ru ; child-src 'self' ; font-src static.lc-group.ru 'self' ; form-action *.ippon.ru 'self' ; frame-ancestors 'self' webvisor.com *.webvisor.com ; frame-src https://*.yandex.ru https://*.google.com https://*.gstatic.com 'self' *.yandex.ru *.yandex.net *.youtube.com youtube.com ; img-src static.lc-group.ru 'self' data: *.merlion.com *.merlion.ru merlion.ru merlion.com ippon.ru *.ippon.ru *.yandex.ru *.yandex.net *.google-analytics.com support.ddix.ru https://*.yandex.ru https://*.yandex.net ; media-src *.ippon.ru static.lc-group.ru 'self' ; object-src *.ippon.ru static.lc-group.ru 'self' ; script-src static.lc-group.ru https://*.webvisor.org https://*.google-analytics.com http://*.googletagmanager.com https://*.google.com https://*.gstatic.com 'self' 'unsafe-eval' *.ippon.ru ippon.ru *.yandex.ru *.yandex.net *.google-analytics.com support.ddix.ru https://*.yandex.ru https://yastatic.net ; style-src static.lc-group.ru 'self' 'unsafe-inline' *.ippon.ru ippon.ru *.yandex.ru *.yandex.net *.google-analytics.com support.ddix.ru ; default-src 'none' ; strict-mixed-content-checking; reflected-xss filter; referrer origin-when-cross-origin;