HTTP/1.1 200 OK
Date: Thu, 17 Feb 2022 12:56:08 GMT
Server: Apache/2
Cache-Control: max-age=0, must-revalidate, private
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self' localhost fonts.gstatic.com vars.hotjar.com insights.hotjar.com in.hotjar.com bid.g.doubleclick.net manager.smartlook.com www.google.com www.lodybonano.pl cdn.plyr.io www.youtube.com vc.hotjar.io staticxx.facebook.com; block-all-mixed-content; img-src 'self' data: blob: csi.gstatic.com maps.gstatic.com maps.googleapis.com www.facebook.com www.google-analytics.com www.google.com stats.g.doubleclick.net www.google.pl maps.google.com www.google.com http://www.google.com www.lodybonano.pl www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: fonts.googleapis.com csi.gstatic.com maps.googleapis.com www.googletagmanager.com static.hotjar.com rec.smartlook.com script.hotjar.com www.google-analytics.com www.googleadservices.com connect.facebook.net googleads.g.doubleclick.net maps.google.com www.google.com www.gstatic.com www.youtube.com s.ytimg.com developers.google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com
X-Content-Security-Policy: default-src 'self' localhost fonts.gstatic.com vars.hotjar.com insights.hotjar.com in.hotjar.com bid.g.doubleclick.net manager.smartlook.com www.google.com www.lodybonano.pl cdn.plyr.io www.youtube.com vc.hotjar.io staticxx.facebook.com; block-all-mixed-content; img-src 'self' data: blob: csi.gstatic.com maps.gstatic.com maps.googleapis.com www.facebook.com www.google-analytics.com www.google.com stats.g.doubleclick.net www.google.pl maps.google.com www.google.com http://www.google.com www.lodybonano.pl www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: fonts.googleapis.com csi.gstatic.com maps.googleapis.com www.googletagmanager.com static.hotjar.com rec.smartlook.com script.hotjar.com www.google-analytics.com www.googleadservices.com connect.facebook.net googleads.g.doubleclick.net maps.google.com www.google.com www.gstatic.com www.youtube.com s.ytimg.com developers.google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com
X-XSS-Protection: 1; mode=block
Set-Cookie: PHPSESSID=ncjero9p2uh2u9op7o8onh4gib; expires=Thu, 24-Feb-2022 12:56:08 GMT; Max-Age=604800; path=/; HttpOnly
Upgrade: h2,h2c
Connection: Upgrade
Vary: Accept-Encoding,User-Agent
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8