Feelgoodbread.ca summary

Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com *.google.com connect.facebook.net platform.twitter.com https://*.google-analytics.com https://*.googletagmanager.com https://*.google.com https://connect.facebook.net https://platform.twitter.com; object-src 'self' *.youtube.com youtube.com https://*.youtube.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://fonts.googleapis.com; img-src 'self' img.youtube.com stats.g.doubleclick.net *.google-analytics.com *.google.com *.facebook.com *.twitter.com external.xx.fbcdn.net *.googleapis.com https://img.youtube.com https://*.google-analytics.com https://*.google.com https://*.facebook.com https://*.twitter.com https://external.xx.fbcdn.net https://stats.g.doubleclick.net https://*.googleapis.com; frame-src 'self' www.smartsource.ca youtube.com www.youtube.com staticxx.facebook.com nam-prod-pe-public.s3.amazonaws.com https://www.smartsource.ca https://youtube.com https://www.youtube.com https://staticxx.facebook.com https://nam-prod-pe-public.s3.amazonaws.com; font-src 'self' fonts.gstatic.com https://fonts.gstatic.com; report-uri /admin/config/system/seckit/csp-report Date: Sun, 13 Aug 2017 05:42:29 GMT Transfer-Encoding: chunked X-Content-Type-Options: nosniff pragma: no-cache X-Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com *.google.com connect.facebook.net platform.twitter.com https://*.google-analytics.com https://*.googletagmanager.com https://*.google.com https://connect.facebook.net https://platform.twitter.com; object-src 'self' *.youtube.com youtube.com https://*.youtube.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://fonts.googleapis.com; img-src 'self' img.youtube.com stats.g.doubleclick.net *.google-analytics.com *.google.com *.facebook.com *.twitter.com external.xx.fbcdn.net *.googleapis.com https://img.youtube.com https://*.google-analytics.com https://*.google.com https://*.facebook.com https://*.twitter.com https://external.xx.fbcdn.net https://stats.g.doubleclick.net https://*.googleapis.com; frame-src 'self' www.smartsource.ca youtube.com www.youtube.com staticxx.facebook.com nam-prod-pe-public.s3.amazonaws.com https://www.smartsource.ca https://youtube.com https://www.youtube.com https://staticxx.facebook.com https://nam-prod-pe-public.s3.amazonaws.com; font-src 'self' fonts.gstatic.com https://fonts.gstatic.com; report-uri /admin/config/system/seckit/csp-report X-Drupal-Cache: HIT Server: Apache Etag: "1502589720-0" Expires: Sun, 19 Nov 1978 05:00:00 GMT Last-Modified: Sun, 13 Aug 2017 02:02:00 GMT Link: </node/4>; rel="shortlink",</home>; rel="canonical" Vary: Cookie,Accept-Encoding Content-Type: text/html; charset=utf-8 X-Frame-Options: SameOrigin HTTP/1.1 200 OK Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com *.google.com connect.facebook.net platform.twitter.com https://*.google-analytics.com https://*.googletagmanager.com https://*.google.com https://connect.facebook.net https://platform.twitter.com; object-src 'self' *.youtube.com youtube.com https://*.youtube.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://fonts.googleapis.com; img-src 'self' img.youtube.com stats.g.doubleclick.net *.google-analytics.com *.google.com *.facebook.com *.twitter.com external.xx.fbcdn.net *.googleapis.com https://img.youtube.com https://*.google-analytics.com https://*.google.com https://*.facebook.com https://*.twitter.com https://external.xx.fbcdn.net https://stats.g.doubleclick.net https://*.googleapis.com; frame-src 'self' www.smartsource.ca youtube.com www.youtube.com staticxx.facebook.com nam-prod-pe-public.s3.amazonaws.com https://www.smartsource.ca https://youtube.com https://www.youtube.com https://staticxx.facebook.com https://nam-prod-pe-public.s3.amazonaws.com; font-src 'self' fonts.gstatic.com https://fonts.gstatic.com; report-uri /admin/config/system/seckit/csp-report Content-Language: fr X-XSS-Protection: 1; mode=block cache-control: no-store X-Generator: Drupal 7 (http://drupal.org)