HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.5
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: SameOrigin
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com youtu.be *.youtu.be *.vimeo.com *.dailymotion.com *.googleapis.com ajax.aspnetcdn.com *.google.com *.googleadservices.com *.google-analytics.com *.google.fr *.gstatic.com *.doubleclick.net *.avis-verifies.com *.scripts.tools *.facebook.net *.facebook.com *.fbcdn.net;style-src 'self' 'unsafe-inline' data: blob: *.youtube.com youtu.be *.youtu.be *.vimeo.com *.dailymotion.com *.googleapis.com ajax.aspnetcdn.com *.google.com *.googleadservices.com *.google-analytics.com *.google.fr *.gstatic.com *.doubleclick.net *.avis-verifies.com *.scripts.tools *.facebook.net *.facebook.com *.fbcdn.net;img-src 'self' http://lorempixel.com data: blob: *.youtube.com youtu.be *.youtu.be *.vimeo.com *.googleapis.com ajax.aspnetcdn.com *.google.com *.googleadservices.com *.google-analytics.com *.google.fr *.gstatic.com *.doubleclick.net *.avis-verifies.com *.scripts.tools *.facebook.net *.facebook.com *.fbcdn.net *.micrologiciel.com;media-src 'self' cdn.wannaspeak.com;frame-src 'self' data: blob: *.youtube.com youtu.be *.youtu.be *.vimeo.com *.dailymotion.com *.googleapis.com ajax.aspnetcdn.com *.google.com *.googleadservices.com *.google-analytics.com *.google.fr *.gstatic.com *.doubleclick.net *.avis-verifies.com *.scripts.tools *.facebook.net *.facebook.com *.fbcdn.net;font-src 'self' *.youtube.com youtu.be *.youtu.be *.vimeo.com *.googleapis.com ajax.aspnetcdn.com *.google.com *.googleadservices.com *.google-analytics.com *.google.fr *.gstatic.com *.doubleclick.net *.avis-verifies.com *.scripts.tools *.facebook.net *.facebook.com *.fbcdn.net;connect-src 'self' *.youtube.com youtu.be *.youtu.be *.vimeo.com *.googleapis.com ajax.aspnetcdn.com *.google.com *.googleadservices.com *.google-analytics.com *.google.fr *.gstatic.com *.doubleclick.net *.avis-verifies.com *.scripts.tools *.facebook.net *.facebook.com *.fbcdn.net;child-src 'self' data: blob: *.youtube.com youtu.be *.youtu.be *.vimeo.com *.google.com *.dailymotion.com;form-action 'self' https://accounts.google.com https://www.google.com https://payment-webinit.simu.mercanet.bnpparibas.net/paymentInit https://payment-webinit.mercanet.bnpparibas.net/paymentInit
X-AspNetMvc-Version: 5.2
Date: Tue, 11 Jun 2019 16:56:06 GMT
Content-Length: 34630