Collegien-shop.com - En.collegien-shop.com

access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
content-encoding: gzip
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' api.lyra.com api.payzen.eu ajax.googleapis.com ws.colissimo.fr api.mapbox.com www.paypalobjects.com *.google.com *.google.fr *.googleadservices.com googleads.g.doubleclick.net connect.facebook.net sw-assets.ekomiapps.de static.payzen.eu *.paypal.com secure.payzen.eu www.google-analytics.com maps.googleapis.com *.googletagmanager.com www.clarity.ms *.axept.io sibautomation.com;frame-src * 'self';style-src 'self' 'unsafe-inline' api.lyra.com api.payzen.eu ws.colissimo.fr api.mapbox.com widgets.ekomi.com sw-assets.ekomiapps.de static.payzen.eu secure.payzen.eu fonts.googleapis.com www.googletagmanager.com;img-src 'self' data: api.lyra.com *.front-commerce.com collegien-shop.fr ws.colissimo.fr api.mapbox.com *.onyourmap.com stats.g.doubleclick.net *.paypal.com *.instagram.com *.cdninstagram.com *.google.com *.google.fr googleads.g.doubleclick.net www.facebook.com scontent.cdninstagram.com scontent-cdt1-1.cdninstagram.com sw-assets.ekomiapps.de smart-widget-assets.ekomiapps.de cx.atdmt.com static.payzen.eu www.paypalobjects.com secure.payzen.eu *.google-analytics.com maps.googleapis.com maps.gstatic.com *.googletagmanager.com *.google.com c.clarity.ms axeptio.imgix.net *.axept.io *.gstatic.com favicons.axept.io;font-src 'self' data: ws.colissimo.fr sw-assets.ekomiapps.de smart-widget-assets.ekomiapps.de fonts.gstatic.com github.com www.googletagmanager.com;connect-src 'self' ws.colissimo.fr widgets.ekomi.com smart-widget-assets.ekomiapps.de *.google-analytics.com stats.g.doubleclick.net maps.googleapis.com *.paypal.com www.paypalobjects.com www.google.fr *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.clarity.ms *.axept.io *.axept.eu in-automate.brevo.com;base-uri 'self';media-src 'self' data:;report-uri /csp/report
content-security-policy-report-only: default-src 'self' *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *;frame-src 'self' api.lyra.com ws.colissimo.fr admin.v2019.collegien.dis-hosting.fr www.facebook.com static.payzen.eu *.paypal.com www.paypalobjects.com secure.payzen.eu *.doubleclick.net sibautomation.com;style-src 'self' 'unsafe-inline' *;img-src 'self' data: *;font-src 'self' data: *;connect-src 'self' *;base-uri 'self' *;report-uri /csp/report
content-type: text/html; charset=utf-8
date: Mon, 12 May 2025 00:40:22 GMT
etag: W/"24ffe-gD2w8X2c6yTSsHZXbort+AosZwM"
expires: 0
pragma: no-cache
referrer-policy: no-referrer
server: dis-waf
server-timing: config; dur=0.48962799999999995; desc="Compute config for request"
server-timing: remote config; dur=2.302323; desc="Build config with remote values"
server-timing: template; dur=0.025502999999999998; desc="Resolve initial template"
server-timing: loaders; dur=2.9388639999999997; desc="Initialize GraphQL loaders"
server-timing: app; dur=0.09655999999999999; desc="React App initialization"
server-timing: getdata; dur=88.22644; desc="Resolve Apollo queries"
server-timing: render; dur=3.75622; desc="Render final HTML"
server-timing: total; dur=101.330024; desc="Total Response Time"
strict-transport-security: max-age=15552000; includeSubDomains
surrogate-control: no-store
vary: Origin, Accept-Encoding
x-content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' api.lyra.com api.payzen.eu ajax.googleapis.com ws.colissimo.fr api.mapbox.com www.paypalobjects.com *.google.com *.google.fr *.googleadservices.com googleads.g.doubleclick.net connect.facebook.net sw-assets.ekomiapps.de static.payzen.eu *.paypal.com secure.payzen.eu www.google-analytics.com maps.googleapis.com *.googletagmanager.com www.clarity.ms *.axept.io sibautomation.com;frame-src * 'self';style-src 'self' 'unsafe-inline' api.lyra.com api.payzen.eu ws.colissimo.fr api.mapbox.com widgets.ekomi.com sw-assets.ekomiapps.de static.payzen.eu secure.payzen.eu fonts.googleapis.com www.googletagmanager.com;img-src 'self' data: api.lyra.com *.front-commerce.com collegien-shop.fr ws.colissimo.fr api.mapbox.com *.onyourmap.com stats.g.doubleclick.net *.paypal.com *.instagram.com *.cdninstagram.com *.google.com *.google.fr googleads.g.doubleclick.net www.facebook.com scontent.cdninstagram.com scontent-cdt1-1.cdninstagram.com sw-assets.ekomiapps.de smart-widget-assets.ekomiapps.de cx.atdmt.com static.payzen.eu www.paypalobjects.com secure.payzen.eu *.google-analytics.com maps.googleapis.com maps.gstatic.com *.googletagmanager.com *.google.com c.clarity.ms axeptio.imgix.net *.axept.io *.gstatic.com favicons.axept.io;font-src 'self' data: ws.colissimo.fr sw-assets.ekomiapps.de smart-widget-assets.ekomiapps.de fonts.gstatic.com github.com www.googletagmanager.com;connect-src 'self' ws.colissimo.fr widgets.ekomi.com smart-widget-assets.ekomiapps.de *.google-analytics.com stats.g.doubleclick.net maps.googleapis.com *.paypal.com www.paypalobjects.com www.google.fr *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.clarity.ms *.axept.io *.axept.eu in-automate.brevo.com;base-uri 'self';media-src 'self' data:;report-uri /csp/report
x-content-type-options: nosniff
x-content-type-options: nosniff
x-dis-country: US
x-dis-id: e98bb4b2c0120b5abc41666b35a9d219161d34c5
x-dis-ts: 1747010422
x-dis-waf: 1
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-ua-compatible: IE=edge
x-xss-protection: 0
x-xss-protection: 1; mode=block