max-age=0, must-revalidate, no-store, private, max-age=0, must-revalidate, no-store, private
keep-alive
gzip
default-src 'none'; base-uri 'self'; block-all-mixed-content; connect-src 'self' https://webstatic.tazz.ro https://tapi.tazz.ro https://geo-coding.tazz.ro https://www.google.com https://stats.g.doubleclick.net https://www.facebook.com *.google-analytics.com analytics.google.com *.analytics.google.com https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com https://*.googleapis.com https://*.force.com https://*.salesforce-sites.com https://analytics.tiktok.com https://adservice.google.com https://www.google.ro https://event.2performant.com https://*.emag.ro https://genius-emagst.akamaized.net https://s13emagst.akamaized.net https://*.creativecdn.com; font-src https://webstatic.tazz.ro https://script.hotjar.com https://c1.sfdcstatic.com https://*.gstatic.com data:; form-action 'self' https://*.emag.ro https://*.salesforce.com https://auth.emag.ro https://www.facebook.com https://accounts.google.com https://appleid.apple.com; frame-ancestors 'self'; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://tpc.googlesyndication.com https://vars.hotjar.com https://service.force.com https://*.salesforce.com bytedance: sslocal: https://event.2performant.com https://www.google.com; img-src 'self' https: data:; manifest-src 'self'; media-src https:; script-src 'self' https://webstatic.tazz.ro https://connect.facebook.net 'unsafe-eval' https://script.hotjar.com https://static.hotjar.com https://www.gstatic.com https://gstatic.com https://*.googleapis.com https://*.force.com https://*.salesforce.com https://*.salesforceliveagent.com https://*.salesforce-sites.com https://analytics.tiktok.com https://www.googleadservices.com https://attr-2p.com https://www.google.com https://*.emag.ro https://genius-emagst.akamaized.net https://s13emagst.akamaized.net https://*.creativecdn.com 'unsafe-inline' 'nonce-2i/QrAsJLh3tRXUf7a+zJg=='; style-src https://webstatic.tazz.ro 'unsafe-inline' https://*.force.com https://*.salesforce-sites.com https://*.emag.ro https://genius-emagst.akamaized.net https://s13emagst.akamaized.net https://*.googleapis.com; report-uri /report/csp
text/html; charset=UTF-8
Wed, 10 Jan 2024 18:16:43 GMT
Wed, 10 Jan 2024 18:16:43 GMT
geolocation=(self),microphone=(),camera=(),fullscreen=(),accelerometer=(),autoplay=()
no-referrer, strict-origin-when-cross-origin
nginx
max-age=31536000; includeSubdomains; preload
Accept-Encoding
nosniff
SAMEORIGIN
1; mode=block
|