Vary: Accept-Encoding X-Content-Type-Options: nosniff Server: nginx HTTP/1.1 200 OK X-Frame-Options: SAMEORIGIN Expires: Thu, 19 Nov 1981 08:52:00 GMT Connection: keep-alive Set-Cookie: PHPSESSID=lc24oe2oh6hec6fridhjgvmt32; path=/; HttpOnly Pragma: no-cache Cache-Control: no-transform Keep-Alive: timeout=7 Transfer-Encoding: chunked Access-Control-Allow-Origin: * Date: Tue, 06 Jun 2017 17:31:14 GMT Content-Type: text/html Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' netograf.ro *.netograf.ro *.googleapis.com maps.gstatic.com *.googleapis.ro mts0.google.com mts1.google.com www.google-analytics.com www.google.com/uds/ https://www.google.com/uds/ www.googleadservices.com connect.facebook.net; connect-src 'self' netograf.ro *.netograf.ro stest.mures.rdsnet.ro *.rdsnet.ro neto.upcbiz.ro; img-src 'self' data: netograf.ro *.netograf.ro maps.googleapis.com/maps/ www.google-analytics.com maps.gstatic.com/mapfiles/ csi.gstatic.com mt0.googleapis.com mt1.googleapis.com mt.googleapis.com stats.g.doubleclick.net www.facebook.com; style-src 'self' 'unsafe-inline' netograf.ro *.netograf.ro fonts.googleapis.com www.google.com/uds/api/ https://www.google.com/uds/api/ ajax.googleapis.com/ajax/static/ https://ajax.googleapis.com/ajax/static/; font-src 'self' fonts.gstatic.com; frame-ancestors maps.google.ro/maps/; object-src *.netograf.ro; frame-src http://*.google.ro:* http://*.google.com https://*.google.ro:* https://*.google.com https://googleads.g.doubleclick.net;