lidl.cz

Http-Version: 1.1
Status-Code: 200
Status: 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.multichannelacd.de lidl.media01.eu form.lidl.com *.lidl.com *.ccmp.eu *.lidl *.lidl.net *.lidl-flyer.com *.google-analytics.com *.bing.com *.virtualearth.net *.googletagmanager.com tagmanager.google.com assets.zendesk.com connect.facebook.net *.cookiebot.com *.secrz.de *.google-analytics.com; img-src 'self' data: lidlplusprod.blob.core.windows.net *.lidl *.lidl.net *.ccmp.eu *.lidl.com *.lidl-flyer.com *.google-analytics.com *.bing.com *.virtualearth.net *.osm.org *.openstreetmap.org *.doubleclick.net s-static.ak.facebook.com assets.zendesk.com *.secrz.de *.google-analytics.com; style-src 'self' 'unsafe-inline' form.lidl.com fonts.googleapis.com *.bing.com assets.zendesk.com *.secrz.de; font-src 'self' 'unsafe-inline' form.lidl.com data: themes.googleusercontent.com fonts.gstatic.com; frame-src 'self' https: 'unsafe-inline'; connect-src 'self' content.lidlplus.com *.multichannelacd.de lidl.media01.eu form.lidl.com *.lidl *.test *.lidl.net *.lidl.com *.bing.com *.ccmp.eu *.virtualearth.net *.osm.org *.openstreetmap.org *.secrz.de *.google-analytics.com; frame-ancestors 'self' *.lidl *.ccmp.eu *.lidl.com *.test *.lidl.net *.bing.com *.googletagmanager.com *.secrz.de *.google-analytics.com *.poi-service.de *.lidl.ch website-lidl-account-dev.azurewebsites.net accounts-stg.lidl.com accounts-qa.lidl.com accounts-uat.lidl.com accounts.lidl.com;
Content-Encoding: gzip
X-Varnish: 30035877 27605688
X-Served-By: wsv-02
Accept-Ranges: bytes
Expires: Tue, 01 Oct 2019 22:40:02 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 01 Oct 2019 22:40:02 GMT
Content-Length: 32407
Connection: keep-alive
Vary: Accept-Encoding
Strict-Transport-Security: max-age=15768000