HTTP/1.1 200 OK
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Set-Cookie: CMSPreferredCulture=pl-PL; expires=Mon, 10-Aug-2020 05:26:12 GMT; path=/; HttpOnly
Set-Cookie: CMSCsrfCookie=32Q0Vsz2SsSL9BMiHSQ21R0Btnz2DzbW2LkSSrG7; path=/; HttpOnly
Set-Cookie: Nestbank_SessionId=jykrch4z0ypqcoh0oc0r0xui; path=/; HttpOnly;Secure
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,PUT,POST
Access-Control-Allow-Headers: Content-Type
Access-Control-Expose-Headers: Paging-Headers
Content-Security-Policy: default-src 'self' *.nestbank.pl https://api.maptiler.com https://maps.tilehosting.com https://api.mapbox.com https://www.youtube.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io; img-src 'self' data: blob: *.googletagmanager.com *.google-analytics.com *.google.com *.google.pl *.gstatic.com *.doubleclick.net; font-src 'self' data: *.googleapis.com *.gstatic.com; style-src 'self' 'unsafe-inline' *.google.com *.gstatic.com *.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.nestbank.pl *.googletagmanager.com *.google-analytics.com *.google.com *.googleadservices.com *.doubleclick.net *.hotjar.com; child-src 'self' blob: *.nestbank.pl https://api.maptiler.com https://maps.tilehosting.com https://api.mapbox.com https://www.youtube.com *.hotjar.com *.hotjar.io;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: strict-origin-when-cross-origin
Set-Cookie: ARRAffinity=a4b97459f90b4bea1372963ae671ef32436fdac5a1609ccc33d489656c4949b0;Path=/;Domain=nestbank.pl
Date: Sat, 10 Aug 2019 05:26:11 GMT
Connection: close
Content-Length: 32775
Set-Cookie: SESSION=!F4Z9pnIjLRiA2BIPzJSjwA6/fRH09YE8v5Bn9tuK9VUEyvgACRSbVV55DFSTnltbEXTFjjfSQbhdKWg=; path=/; Httponly; Secure