Carrefour.tn

Server: nginx
Date: Sun, 19 Jun 2022 03:12:05 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.carrefour.tn

HTTP/2 200 
cache-control: no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
allow: GET, POST
content-length: 85991
content-type: text/html; charset=UTF-8
content-encoding: gzip
expires: -1
accept-ranges: bytes
vary: Accept-Encoding
set-cookie: PHPSESSID=4m60qj0sj834kekj7h01lukk1u; expires=Thu, 23-Jun-2022 07:12:06 GMT; Max-Age=360000; path=/; domain=.carrefour.tn; HttpOnly
set-cookie: basic_auth_carrefour=authenticated;Domain=carrefour.tn;Path=/;Max-Age=100000;HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
x-permitted-cross-domain-policies: master-only
referrer-policy: origin
content-security-policy: default-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'report-sample' 'self' connect.facebook.net *.carrefour.tn *.googleapis.com *.google.com *.gstatic.com; script-src-attr 'unsafe-eval' 'unsafe-inline' 'report-sample' 'self' https://connect.facebook.net/ *.carrefour.tn *.googleapis.com; script-src-elem 'unsafe-eval' 'unsafe-inline' 'report-sample' 'self' https://connect.facebook.net/ *.carrefour.tn *.googleapis.com www.google.com *.gstatic.com *.sharethis.com *.paypal.com *.algolianet.com *.algolia.net *.polyfill.io polyfill.io *.google-analytics.com *.hotjar.com *.googletagmanager.com; style-src 'unsafe-inline' 'report-sample' 'self' fonts.googleapis.com maxcdn.bootstrapcdn.com *.carrefour.tn *.sharethis.com; object-src 'none'; base-uri 'self' *.carrefour.tn; connect-src 'self' *.doubleclick.net *.hotjar.com *.google-analytics.com *.cdn77.org *.meetlookup.com  *.carrefour.tn *.facebook.com *.sharethis.com *.meetlookup.com *.algolianet.com *.algolia.net; font-src 'self' fonts.gstatic.com maxcdn.bootstrapcdn.com *.carrefour.tn; frame-src 'self' *.hotjar.com www.google.com *.gstatic.com www.facebook.com online.fliphtml5.com *.youtube.com *.sharethis.com; img-src data: blob: 'self' *.google.com *.google.nl *.googletagmanager.com *.google-analytics.com *.carrefour.tn www.facebook.com *.gstatic.com *.windows.net *.googleapis.com *.xtento.com i.ibb.co i.ytimg.com www.magentocommerce.com *.ggpht.com; manifest-src 'self'; media-src 'self' *.carrefour.tn; report-uri https://satoripop.report-uri.com/r/d/csp/reportOnly; worker-src 'none';
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-max-age: 1728000
host: www.carrefour.tn
x-real-ip: 67.212.187.106
x-forwarded-for: 67.212.187.106, 67.212.187.106
x-forwarded-proto: https
x-forwarded-port: 443
x-forwarded-host: 67.212.187.106, 67.212.187.106
x-basic-auth-carrefour: Authenticated
https: on
strict-transport-security: max-age=31536000; includeSubDomains; preload; always;
x-azure-ref: 0BZSuYgAAAACxLPdnebOZSbOVUeaAeoe3QVRMMzMxMDAwMTEwMDMzADVmNzA5OWVlLWVhMjUtNDU3Zi1iMzJlLTBmMjI4NWQ3NDFhZg==
date: Sun, 19 Jun 2022 03:12:05 GMT