Server | Apache |
Cache-Control | max-age=0, must-revalidate, private |
X-Content-Type-Options | nosniff |
Strict-Transport-Security | max-age=604800; includeSubDomains |
X-Frame-Options | DENY |
Content-Security-Policy | default-src 'self' localhost maps.googleapis.com wss://s7.smartsupp.com s7.smartsupp.com smartsupp-widget-161959.c.cdn77.org themes.googleusercontent.com s2.smartlook.com writer.smartlook.com https://fonts.gstatic.com https://static.mkonferencja.pl https://writer-mobile.smartlook.com https://fullstory.com https://r.fullstory.com; block-all-mixed-content; child-src www.youtube.com staticxx.facebook.com https://static.mkonferencja.pl https://googleads.g.doubleclick.net https://www.google.com https://www.google.pl https://bid.g.doubleclick.net https://www.youtube.com; connect-src 'self' localhost https://heapanalytics.com https://fullstory.com https://r.fullstory.com https://rs.fullstory.com https://s7.smartsupp.com wss://s7.smartsupp.com maps.googleapis.com; font-src 'self' devmkonferencja https://static.mkonferencja.pl https://static.mconference.eu https://static.mconference.us https://heapanalytics.com https://fonts.gstatic.com https://smartsupp-widget-161959.c.cdn77.org https://use.typekit.net; img-src 'self' data: blob: devmkonferencja cdn.heapanalytics.com google-analytics.com fonts.googleapis.com csi.gstatic.com maps.google.com maps.gstatic.com maps.googleapis.com http://maps.googleapis.com www.facebook.com static.smartsupp.co www.google-analytics.com heapanalytics.com web.facebook.com https://static.mkonferencja.pl https://heapanalytics.com https://p.typekit.net developers.google.com; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' data: devmkonferencja cdn.heapanalytics.com google-analytics.com fonts.googleapis.com csi.gstatic.com maps.google.com maps.gstatic.com maps.googleapis.com www.smartsuppchat.com www.google-analytics.com connect.facebook.net ajax.googleapis.com smartsupp-widget-161959.c.cdn77.org rec.smartlook.com www.gstatic.com https://static.mkonferencja.pl https://www.googleadservices.com https://rec-src.smartlook.com https://fullstory.com https://heapanalytics.com https://cdn.heapanalytics.com https://use.typekit.net developers.google.com; style-src 'self' 'unsafe-inline' devmkonferencja fonts.googleapis.com smartsupp-widget-161959.c.cdn77.org www.gstatic.com https://static.mkonferencja.pl https://heapanalytics.com; report-uri /nelmio/csp/report |
X-Content-Security-Policy | default-src 'self' localhost maps.googleapis.com wss://s7.smartsupp.com s7.smartsupp.com smartsupp-widget-161959.c.cdn77.org themes.googleusercontent.com s2.smartlook.com writer.smartlook.com https://fonts.gstatic.com https://static.mkonferencja.pl https://writer-mobile.smartlook.com https://fullstory.com https://r.fullstory.com; block-all-mixed-content; child-src www.youtube.com staticxx.facebook.com https://static.mkonferencja.pl https://googleads.g.doubleclick.net https://www.google.com https://www.google.pl https://bid.g.doubleclick.net https://www.youtube.com; connect-src 'self' localhost https://heapanalytics.com https://fullstory.com https://r.fullstory.com https://rs.fullstory.com https://s7.smartsupp.com wss://s7.smartsupp.com maps.googleapis.com; font-src 'self' devmkonferencja https://static.mkonferencja.pl https://static.mconference.eu https://static.mconference.us https://heapanalytics.com https://fonts.gstatic.com https://smartsupp-widget-161959.c.cdn77.org https://use.typekit.net; img-src 'self' data: blob: devmkonferencja cdn.heapanalytics.com google-analytics.com fonts.googleapis.com csi.gstatic.com maps.google.com maps.gstatic.com maps.googleapis.com http://maps.googleapis.com www.facebook.com static.smartsupp.co www.google-analytics.com heapanalytics.com web.facebook.com https://static.mkonferencja.pl https://heapanalytics.com https://p.typekit.net developers.google.com; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' data: devmkonferencja cdn.heapanalytics.com google-analytics.com fonts.googleapis.com csi.gstatic.com maps.google.com maps.gstatic.com maps.googleapis.com www.smartsuppchat.com www.google-analytics.com connect.facebook.net ajax.googleapis.com smartsupp-widget-161959.c.cdn77.org rec.smartlook.com www.gstatic.com https://static.mkonferencja.pl https://www.googleadservices.com https://rec-src.smartlook.com https://fullstory.com https://heapanalytics.com https://cdn.heapanalytics.com https://use.typekit.net developers.google.com; style-src 'self' 'unsafe-inline' devmkonferencja fonts.googleapis.com smartsupp-widget-161959.c.cdn77.org www.gstatic.com https://static.mkonferencja.pl https://heapanalytics.com; report-uri /nelmio/csp/report |
X-XSS-Protection | 1; mode=block |
Upgrade | h2,h2c |
Connection | Upgrade, Keep-Alive |
Vary | Accept-Encoding,User-Agent |
Content-Encoding | gzip |
Access-Control-Allow-Credentials | true |
Keep-Alive | timeout=2, max=100 |
Content-Type | text/html; charset=UTF-8 |