gene.com

Http-Version: 1.1
Status-Code: 200
Status: 200 OK
Date: Fri, 18 Oct 2019 10:20:02 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
CF-Cache-Status: EXPIRED
Cache-Control: public, max-age=0, s-maxage=300
CF-Ray: 5279c7016ca9bf28-FRA
Access-Control-Allow-Headers: Content-Type, Accept, Authorization, X-Requested-With, X-CSRF-TOKEN
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Origin: http://manage.gene.com
Content-Security-Policy: reflected-xss block; object-src 'self'; report-uri https://roche.report-uri.com/r/t/csp/enforce;
Content-Security-Policy-Report-Only: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.roche.com *.roche.net *.gene.com cdn.walkme.com tpc.googlesyndication.com api.html5media.info workdevapp.com cdn-js.net gdata.youtube.com twitter.com api.flickr.com graph.facebook.com sharecdn.social9.com maps.googleapis.com use.typekit.com munchkin.marketo.net img.en25.com w.likebtn.com cdn.mathjax.org sadmin.brightcove.com cdnjs.cloudflare.com releases.flowplayer.org script.crazyegg.com wi.likebtn.com pepperglobal.com analytics.twitter.com cdn.blueconic.net connect.facebook.net fullstory.com script.hotjar.com gnntch.blueconic.net rules.quantcount.com secure.quantserve.com static.hotjar.com www.youtube.com www.googletagmanager.com www.google-analytics.com google-analytics.com *.gstatic.com static.ads-twitter.com sjs.bizographics.com *.linkedin.com www.google.com w.soundcloud.com s.ytimg.com *.cloudflareaccess.com *.salesforceliveagent.com https://*.roche.com:8080 https://cdnjs.org https://service.force.com/*; style-src * 'self' 'unsafe-inline'; img-src * 'self' data:; font-src * 'self' data:; connect-src * 'self'; media-src * 'self' data:; object-src 'self'; child-src 'self' *.roche.com *.roche.net *.gene.com *.facebook.net qpcr.probefinder.com *.force.com *.hotjar.com www.facebook.com www.google.com www.googletagmanager.com www.youtube.com; frame-src 'self' *.roche.com *.roche.net *.gene.com www.youtube.com *.cloudfront.net *.facebook.net *.arcot.com live.sagepay.com player.vimeo.com tpc.googlesyndication.com players.brightcove.net qpcr.probefinder.com *.eloqua.com *.hotjar.com *.soundcloud.com *.facebook.com *.google.com *.googletagmanager.com *.youtube-nocookie.com *.youtube.com *.mendeley.com *.force.com https://cdn.walkme.com/*; worker-src 'self' *.roche.com *.roche.net *.gene.com; frame-ancestors 'self' *.roche.com *.roche.net *.gene.com content.bioclinicien.fr connect.facebook.net www.facebook.com s1691.t.eloqua.com *.cloudflareworkers.com; form-action 'self' *.roche.com *.roche.net *.gene.com content.bioclinicien.fr connect.facebook.net www.facebook.com s1691.t.eloqua.com; disown-opener; reflected-xss block; base-uri *.roche.com *.roche.net *.gene.com; plugin-types application/pdf; referrer origin-when-cross-origin; report-uri https://roche.report-uri.com/r/t/csp/reportonly
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Expect-Staple: max-age=3600; report-uri="https://roche.report-uri.com/r/t/staple/reportOnly"; includeSubDomains
Expires: Fri, 18 Oct 2019 11:20:02 GMT
Feature-Policy: vibrate 'self'; notifications 'self';
Link: ;rel=preload;as=script
NEL: {"report_to":"default","max_age":3600,"include_subdomains":true,"failure_fraction": 0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"default","max_age":3600,"endpoints":[{"url":"https://roche.report-uri.com/a/t/g"}],"include_subdomains":true}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Powered-By: PHP/7.2.17
X-UA-Compatible: IE=Edge,chrome=1
X-Xss-Protection: 1; report="https://roche.report-uri.com/r/t/xss/reportOnly"
Server: cloudflare
Content-Encoding: gzip