HTTP/1.1 200 OK
Date: Wed, 17 Jul 2019 15:29:27 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Set-Cookie: fe_typo_user=c56853dea34ef0519109123bad680c92; path=/
Content-Security-Policy: default-src 'self'; img-src 'self' *.facebook.com *.youtube.com *.twitter.com http://toplist.cz *.google-analytics.com *.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.twitter.com *.facebook.net *.addthisedge.com *.google-analytics.com *.googletagmanager.com *.mouseflow.com *.hotjar.com *.addthis.com *.facebook.com *.youtube.com; child-src 'self' *.facebook.com *.facebook.net *.addthis.com *.twitter.com *.google.com *.google.cz *.hotjar.com *.youtube.com; object-src *; style-src 'self' 'unsafe-inline' http://fonts.googleapis.com; connect-src 'self' https://www.youtube.com *.google-analytics.com *.addthis.com *.hotjar.com; font-src 'self' http://themes.googleusercontent.com;
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8