X-Frame-Options: ALLOWALL Public-Key-Pins: pin-sha256="wyOxFgOquc4Ia6RKftezHsCdd5qYOC+tiP5Y/uc5Dw4=";pin-sha256="47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=";max-age=5184000;includeSubDomains; Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * X-Magento-Tags: store,cms_block,cms_block_footer_links_block,cms_block_footer_social_block,cms_page_2,catalog_product Expires: -1 Connection: keep-alive Access-Control-Allow-Methods: GET, POST, PUT, DELETE, PATCH, OPTIONS Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 X-Varnish: 5541667 327686 Pragma: no-cache HTTP/1.1 200 OK Server: nginx Accept-Ranges: bytes X-XSS-Protection: 1; mode=block Access-Control-Allow-Headers: * Content-Security-Policy: upgrade-insecure-requests Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Date: Tue, 14 Nov 2017 16:53:28 GMT Via: 1.1 varnish-v4 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff