Footlocker.com.au - Stores.footlocker.com.au

content-type: text/html
content-length: 79
date: Wed, 24 Jan 2024 12:55:46 GMT
cache-control: public,s-maxage=1036800,max-age=60
last-modified: Wed, 24 Jan 2024 07:05:00 GMT
etag: "9e37ca10e5f3caf08dc1e5fd5516f6e7"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 cd70e8654a3d1e664579c68192c0146c.cloudfront.net (CloudFront)
x-amz-cf-pop: SFO5-C3
x-amz-cf-id: EVGhdJrbtHST3EwRtfC9xPAPuNWbqpLWXnmlkDFkdIf0EqSE1pKVhQ==
age: 3915
content-security-policy: default-src 'self'; connect-src 'self' *; font-src 'self' * data:; frame-src *; img-src 'self' blob: * data: https://cdn.eql.media; media-src * data: https://cdn.eql.media; script-src 'self' 'report-sample' *.eql.com *.googletagmanager.com *.google.com/recaptcha/ *.gstatic.com *.gstatic.com stripe.com *.stripe.com *.stripe.com/ https://*.google-analytics.com 'unsafe-inline' 'unsafe-eval' https://*.tally.so https://fpjscdn.net https://connect.facebook.net https://tally.so; script-src-elem 'self' 'report-sample' 'unsafe-hashes' *.eql.com https://*.googleapis.com *.googletagmanager.com *.google.com/recaptcha/ *.gstatic.com *.stripe.com https://*.google-analytics.com 'unsafe-inline' 'unsafe-eval' https://*.tally.so https://fpjscdn.net https://connect.facebook.net https://polyfill.io https://tally.so https://fidoapi.com about: https://api.eql.com https://www.googletagmanager.com https://translate.google.com https://www.gstatic.com/recaptcha/; style-src 'self' 'report-sample' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self'; worker-src 'self' blob:; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubb036eb0ae73c69228c699e7494e53a60&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=site:eqlxyz; manifest-src *; style-src-elem * 'unsafe-inline' data:;
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy-report-only: base-uri 'none'; connect-src 'self' *.google-analytics.com *.mixpanel.com d3a4k4t4rjoe9r.cloudfront.net d2hdg43pa25mvl.cloudfront.net *.browser-intake-datadoghq.com *.eql.com *.eql.xyz *.adyen.com translate.googleapis.com *.authz.cloudentity.io *.fpapi.io *.avo.app tally.so; default-src 'self'; font-src 'self' fonts.gstatic.com cdn.eql.media; form-action 'none'; frame-ancestors 'self'; frame-src *.eql.com *.stripe.com *.google.com/recaptcha/ *.avo.app tally.so *.adyen.com; img-src 'self' www.googletagmanager.com *.google-analytics.com cdn.eql.media purecatamphetamine.github.io/country-flag-icons/ *.adyen.com fonts.gstatic.com translate.googleapis.com; manifest-src 'self'; media-src 'self' cdn.eql.media; object-src 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubb036eb0ae73c69228c699e7494e53a60&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=mode%3Aproduction%2Cversion%3A2.1%2Csite%3Alaunch; script-src 'self' 'nonce-020d9332f326' *.eql.com *.googletagmanager.com *.stripe.com *.google.com/recaptcha/ *.gstatic.com/recaptcha/ *.tally.so tally.so fidoapi.com connect.facebook.net fpjscdn.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.eql.media; worker-src 'none';
date: Wed, 24 Jan 2024 14:01:02 GMT
content-type: text/html;charset=UTF-8
content-length: 121557
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1
strict-transport-security: max-age=8995000; includeSubdomains;
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: X-Requested-With, X-Accept, Content-Type
x-did: 7160
x-cache: HIT
access-control-allow-origin: 
access-control-allow-credentials: true