X-XSS-Protection: 1; mode=block Content-Security-Policy: script-src data: 'self' 'unsafe-inline' 'unsafe-eval' *.snowleader.com *.snowleader.be *.snowleader.ch *.snowleader.de *.snowleader.at *.snowleader.co.uk *.google.com *.googleapis.com googleapis.com www.googlecommerce.com www.google-analytics.com www.googleadservices.com *.gstatic.com www.googletagmanager.com *.zopim.com *.criteo.com static.criteo.net tracker.twenga.fr t.c4tw.net api2.reversoform.com *.bazaarvoice.com use.typekit.net mpsnare.iesnare.com connect.facebook.net *.twitter.com cdn.syndication.twimg.com d31qbv1cthcecs.cloudfront.net https://display.ugc.bazaarvoice.com https://apis.google.com https://d31qbv1cthcecs.cloudfront.net https://stg.api.bazaarvoice.com https://mpsnare.iesnare.com https://network-stg.bazaarvoice.com https://network.bazaarvoice.com https://api.bazaarvoice.com https://analytics-static.ugc.bazaarvoice.com https://maps.googleapis.com https://secure.skypeassets.com www.skypeassets.com https://98t4f62uw1.kameleoon.eu https://ewnxky8h6u.kameleoon.eu https://hht0f37q6v.kameleoon.eu https://mm14aijsxz.kameleoon.eu https://74m0rlm9ta.kameleoon.eu *.kameleoon.eu *.kameleoon.com https://mc.yandex.ru https://yastatic.net https://widgets.trustedshops.com https://js-agent.newrelic.com https://bam.nr-data.net http://widgets.trustedshops.com HTTP/1.1 200 OK X-Mod-Pagespeed: 1.9.32.14-0 X-Content-Type-Options: nosniff Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Content-Language: fr P3p: CP="CAO PSA OUR" Age: 63019 Connection: keep-alive X-Front: snow-front1 Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT Server: nginx/1.2.1 Vary: Host,Accept-Encoding Access-Control-Allow-Headers: User-Agent,Keep-Alive,Content-Type,X-Prototype-Version,X-Requested-With X-Cache: HIT Vary: Accept-Encoding X-Cache-Hits: 64 Date: Thu, 01 Jun 2017 08:26:12 GMT X-Snow-Galaxy: true Cache-Control: max-age=0, no-cache, must-revalidate, s-maxage=600 X-Varnish: 874057197 873057415 Access-Control-Allow-Credentials: true