HTTP/1.1 200 OK
Date: Wed, 17 Jul 2019 14:31:36 GMT
Server: Apache
X-Content-Type-Options: nosniff
X-Powered-By: PHP/5.4.45-0+deb7u8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Last-Modified: Wed, 17 Jul 2019 14:31:36 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=b2t0648ka44t1rggkc82leric7; path=/; domain=.obchody24.cz; secure; HttpOnly
Set-Cookie: custPref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT
Set-Cookie: custPref=a9af3d1a1aa894df24f3aa8684f82ec6; expires=Fri, 16-Jul-2021 14:31:37 GMT; path=/; domain=www.obchody24.cz; secure; httponly
Vary: Accept-Encoding
Content-Security-Policy: default-src 			'self' https://navsi.obchody24.info https://www.imgfiles.cz https://www.navody24.cz 			https://ssl.heureka.cz https://www.zbozi.cz https://c.imedia.cz https://im9.cz 			https://connect.facebook.net 			https://ajax.googleapis.com https://www.googletagmanager.com https://www.googleadservices.com https://www.google-analytics.com 			https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://tpc.googlesyndication.com; 		style-src 			'self' 'unsafe-inline' 'unsafe-eval'; 		media-src 'self'; 		script-src 			'self' 'unsafe-inline' 'unsafe-eval' 			 https://ssl.heureka.cz https://www.zbozi.cz https://c.imedia.cz https://im9.cz 			 https://connect.facebook.net 			 https://www.google.com https://www.gstatic.com 			 https://ajax.googleapis.com https://www.googletagmanager.com https://www.googleadservices.com https://www.google-analytics.com 			 https://ssl.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://tpc.googlesyndication.com; 		img-src 			'self' data: blob: https:; 		font-src 			'self' data: https:; 		frame-src 			'self' https:; 		object-src 'self' https://navsi.obchody24.info https://www.imgfiles.cz; 		frame-ancestors 'self'; 		require-sri-for script style; 		upgrade-insecure-requests; 		report-uri 			https://a348cd10bb10a7bbc366ec9c6cc0bb57.report-uri.com/r/d/csp/enforce;
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Feature-Policy: autoplay 'none'; camera 'none'; microphone 'none'; geolocation 'self';
Referrer-Policy: strict-origin-when-cross-origin
Access-Control-Allow-Origin: *
X-XSS-Protection: 1; mode=block; report=https://a348cd10bb10a7bbc366ec9c6cc0bb57.report-uri.com/r/d/xss/enforce
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://a348cd10bb10a7bbc366ec9c6cc0bb57.report-uri.com/a/d/g"}],"include_subdomains":true}
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1250