| Server | Apache |
| Vary | Host,Accept-Encoding |
| P3P | CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA" |
| X-Content-Type-Options | nosniff, nosniff |
| X-XSS-Protection | 1; mode=block |
| X-Frame-Options | sameorigin |
| Content-Security-Policy | default-src 'self' *.colissimo.fr *.laboutiquedushorty.com *.laboutiqueduboxer.com *.google-analytics.com *.googlecommerce.com *.googleapis.com; script-src data: 'unsafe-inline' 'unsafe-eval' https://www.tnt.fr *.tnt.fr *.google.com *.gstatic.com *.laboutiquedushorty.com *.laboutiqueduboxer.com *.google-analytics.com *.googlecommerce.com *.googleapis.com; style-src 'self' 'unsafe-inline' *.laboutiquedushorty.com *.laboutiqueduboxer.com *.google-analytics.com *.googlecommerce.com *.googleapis.com; media-src *; img-src 'self' * data:; font-src fonts.gstatic.com *.laboutiquedushorty.com *.laboutiqueduboxer.com *.google-analytics.com *.googlecommerce.com *.googleapis.com |
| X-Content-Security-Policy | default-src 'self' *.colissimo.fr *.laboutiquedushorty.com *.laboutiqueduboxer.com *.google-analytics.com *.googlecommerce.com *.googleapis.com; script-src data: 'unsafe-inline' 'unsafe-eval' https://www.tnt.fr *.tnt.fr *.google.com *.gstatic.com *.laboutiquedushorty.com *.laboutiqueduboxer.com *.google-analytics.com *.googlecommerce.com *.googleapis.com; style-src 'self' 'unsafe-inline' *.laboutiquedushorty.com *.laboutiqueduboxer.com *.google-analytics.com *.googlecommerce.com *.googleapis.com; media-src *; img-src 'self' * data:; font-src fonts.gstatic.com *.laboutiquedushorty.com *.laboutiqueduboxer.com *.google-analytics.com *.googlecommerce.com *.googleapis.com |
| Content-Encoding | gzip |
| Keep-Alive | timeout=5, max=100 |
| Connection | Keep-Alive |
| Content-Type | text/html; charset=utf-8 |