Otsmartpad.co.uk

Date: Tue, 14 Nov 2023 10:32:34 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Security-Policy: default-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline' officeteam.co.uk *.fullstory.com snap.licdn.com *.gstatic.com kenwheeler.github.io widget.trustpilot.com *.richrelevance.com *.linkedin.com *.facebook.net *.zopim.com *.facebook.com *.jquery.com *.force24.co.uk owlcarousel2.github.io *.googletagmanager.com cdn.jsdelivr.net cdnjs.cloudflare.com ajax.googleapis.com js-agent.newrelic.com services.postcodeanywhere.co.uk *.google-analytics.com *.pcapredict.com *.zdassets.com *.bootstrapcdn.com *.googleadservices.com *.google.com c.webtrends-optimize.com cdn.polyfill.io diffuser-cdn.app-us1.com prism.app-us1.com trackcmp.net wp-ui.app-us1.com ;style-src 'self' 'unsafe-inline' *.fontawesome.com fonts.googleapis.com kenwheeler.github.io owlcarousel2.github.io cdnjs.cloudflare.com services.postcodeanywhere.co.uk *.pcapredict.com *.bootstrapcdn.com *.google.com;font-src 'self' *.fontawesome.com *.bootstrapcdn.com kenwheeler.github.io data: *.gstatic.com;img-src 'self' blob: officeteam.co.uk *.pimber.ly *.fullstory.com *.facebook.com *.linkedin.com *.adsymptotic.com *.google.com.vn *.google.com.uk *.google.co.uk *.google.com.us *.google.co.us *.google.ch *.googleusercontent.com *.doubleclick.net v2assets.zopim.io *.force24.co.uk *.zdassets.com data: *.google-analytics.com officeteamimages.blob.core.windows.net otpimprod.blob.core.windows.net s3-eu-west-1.amazonaws.com otsmartpad.co.uk *.googletagmanager.com *.gstatic.com *.google.com kenwheeler.github.io;media-src 'self' https://cdn.pimber.ly officeteamimages.blob.core.windows.net otpimprod.blob.core.windows.net s3-eu-west-1.amazonaws.com *.zdassets.com;frame-ancestors 'self' *.myworkday.com *.resideo.com https://otgroupltd.co.uk https://*.tradecentric.com https://rwerp1wd02.gate.rwe.com https://*.bnymellon.net https://peoplesoftpfn.bnymellon.net https://bnymellon.net https://bnymellon.aquiire.net https://srmprd01.sap.collins.com https://spicers.co.uk https://stage-connect.tradecentric.com https://bsigroup.p2p.basware.com/ https://bsigrouptest.p2p.basware.com/ https://eu1a.compleat.online/SalesDemo/ https://eu1a.demo.compleat.online/CompleatDemoEducation/ https://turningpoint.wax-uat.com https://turningpoint.wax-live.com https://purchasepoint.turning-point.co.uk https://usertest.sciquest.com https://benteler-test.coupahost.com https://benteler.coupahost.com https://solutions.sciquest.com https://zurich.coupahost.com https://zurich-test.coupahost.com https://qvc-test.coupahost.com https://qvc.coupahost.com https://wildheartssmartpad.co.uk https://www.kogu.co.uk https://www.otsmartpad.co.uk https://marrprocurementonline.com http://marrprocurementonline.com https://portal.punchout2go.com https://connect.punchout2go.com https://officeteam.co.uk https://sap.com https://ariba.com https://service.ariba.com https://s1-eu.ariba.com https://aig-sap.procurement.ariba.com https://aig-sap-t.procurement.ariba.com https://s1.ariba.com https://*.ariba.com http://*.stwater.intra https://*.merseyrail.org https://*.merseyrail.org:8000 http://*.merseyrail.org:8000 http://*.merseyrail.org http://*.merseyrail.org:8000/neptune/webapp/ https://angloamerican.com https://dyson.com https://compleatsoftware.com https://home.kpmg https://kpmg.co.uk http://qvc.com https://qvc.com https://betfred.com https://muller.co.uk https://gsk.com https://otwholesale.co.uk https://yourofficedepot.co.uk http://yourofficedepot.com.gridhosted.co.uk https://www.churchmarketplace.org.uk https://dev.churchmarketplace.org.uk diffuser-cdn.app-us1.com https://*.workday.com *.coupahost.com; report-uri /reports/csp/export;
X-Frame-Options: ALLOW-FROM (https://benteler-test.coupahost.com https://benteler.coupahost.com https://staging-otsmartpad.co.uk https://otsmartpad.co.uk https://www.otsmartpad.co.uk https://staging-otsmartpad.co.uk https://marrprocurementonline.com http://marrprocurementonline.com https://portal.punchout2go.com https://connect.punchout2go.com https://officeteam.co.uk https://sap.com https://ariba.com https://service.ariba.com https://angloamerican.com https://dyson.com https://compleatsoftware.com https://home.kpmg https://kpmg.co.uk http://qvc.com https://qvc.com https://betfred.com https://muller.co.uk https://gsk.com https://aig-sap.procurement.ariba.com https://aig-sap-t.procurement.ariba.com https://*.ariba.com http://*.stwater.intra http://*.merseyrail.org https://*.merseyrail.org http://*.merseyrail.org:8000 https://*.merseyrail.org:8000 https://zurich.coupahost.com https://zurich-test.coupahost.com https://qvc-test.coupahost.com https://qvc.coupahost.com https://otgroupltd.co.uk https://connect.tradecentric.com https://portal.tradecentric.com https://rwerp1wd02.gate.rwe.com https://bnymellon.aquiire.net https://srmprd01.sap.collins.com https://spicers.co.uk https://stage-connect.tradecentric.com)
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Permissions-Policy: geolocation=()
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: none
Strict-Transport-Security: max-age=31536000; includeSubDomains;
Feature-Policy: camera 'none'; fullscreen 'self'
Expect-CT: enforce, max-age=31536000
Set-Cookie: talon_cookies=df67a919-729d-4a52-8624-cd2310de7cce; expires=Fri, 11-Nov-2033 10:32:33 GMT; Max-Age=315360000; path=/; secure; HttpOnly
Set-Cookie: PHPSESSID=prgh1o3ssjqtqjj9o1evhatc52; expires=Tue, 14-Nov-2023 11:32:33 GMT; Max-Age=3600; path=/; httponly; secure; Samesite=none; secure; HttpOnly
Cache-Control: no-cache, private
Set-Cookie: device_view=full; expires=Thu, 14-Dec-2023 10:32:34 GMT; Max-Age=2592000; path=/; HttpOnly
Set-Cookie: PHPSESSID=prgh1o3ssjqtqjj9o1evhatc52; expires=Tue, 14-Nov-2023 11:32:34 GMT; Max-Age=3600; path=/; httponly; secure; Samesite=none; secure; HttpOnly