HTTP/1.1 200 OK
Date: Fri, 07 Jun 2019 18:54:46 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
Age: 0
Strict-Transport-Security: max-age=31536000
X-Xss-Protection: 1; mode=block
Content-Security-Policy-Report-Only: default-src apis.google.com 'self'; script-src api.adapti.me swrap.tradedoubler.com www.hediard.fr www.hediard.com www.googlecommerce.com cl.avis-verifies.com js.zohostatic.eu salesiq.zoho.eu data: seal.websecurity.norton.com *.limonetik.com www.gstatic.com connect.facebook.net www.google-analytics.com www.googletagmanager.com www.google.com cdnjs.cloudflare.com 'self' apis.google.com 'unsafe-inline' 'unsafe-eval'; style-src www.hediard.com www.hediard.fr css.zohostatic.eu cdn-images.mailchimp.com 'self' 'unsafe-inline'; img-src api.adapti.me live.hediard.fr www.hediard.fr www.hediard.com csi.gstatic.com www.netreviews.eu vts.zohopublic.eu salesiq.zohopublic.eu cl.avis-verifies.com www.simicart.com *.limonetik.com stats.g.doubleclick.net www.google.fr www.google.com data: www.facebook.com www.google-analytics.com 'self'; font-src www.hediard.fr www.hediard.com  data: css.zohostatic.eu fonts.gstatic.com fonts.zohostatic.eu; connect-src api.adapti.me salesiq.zohopublic.eu www.google-analytics.com stats.g.doubleclick.net vts.zohopublic.eu wss://vts.zohopublic.eu salesiq.zoho.eu 'self'; frame-src s3.amazonaws.com *.google.com www.facebook.com; media-src www.google-analytics.com; form-action www.hediard.fr www.hediard.com www.facebook.com; report-uri https://prodnet.report-uri.com/r/d/csp/reportOnly;
Accept-Ranges: bytes
Transfer-Encoding: chunked
Connection: keep-alive