Loblawcardservices.ca summary

Date: Wed, 28 Feb 2018 17:53:39 GMT X-Permitted-Cross-Domain-Policies: master-only X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=63072000; includeSubDomains X-WebKit-CSP: default-src 'self' https://*.google-analytics.com https://*.amazonaws.com https://*.cloudfront.net https://*.intelispend.com https://*.loblawcardservices.ca https://loblawcardservices.ca; style-src https: 'unsafe-inline'; script-src 'self' https://www.google.com https://www.gstatic.com https://apis.google.com 'unsafe-inline' 'unsafe-eval'; child-src www.google.com; img-src 'self' https://*.cloudfront.net; frame-src 'self' https://www.google.com; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com data: Content-Security-Policy: default-src 'self' https://*.google-analytics.com https://*.amazonaws.com https://*.cloudfront.net https://*.intelispend.com https://*.loblawcardservices.ca https://loblawcardservices.ca; style-src https: 'unsafe-inline'; script-src 'self' https://www.google.com https://www.gstatic.com https://apis.google.com 'unsafe-inline' 'unsafe-eval'; child-src www.google.com; img-src 'self' https://*.cloudfront.net; frame-src 'self' https://www.google.com; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com data: HTTP/1.1 200 OK X-Download-Options: noopen Content-Length: 33717 X-Content-Type-Options: nosniff X-DNS-Prefetch-Control: off Access-Control-Allow-Methods: POST, GET, DELETE, PUT Set-Cookie: lang=en_US; Max-Age=86400; Path=/; Expires=Thu, 01 Mar 2018 17:53:39 GMT; HttpOnly; Secure Content-Type: text/html; charset=utf-8 X-XSS-Protection: 1; mode=block Vary: Accept-Encoding Server: Apache