Strict-Transport-Security: max-age=31536000; includeSubDomains HTTP/1.1 200 OK Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Set-Cookie: SIDshopserver=app3; path=/ Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Transfer-Encoding: chunked X-Frame-Options: SAMEORIGIN Set-Cookie: dhsid=j139ttv62q9m1v9jndebdf8cv7; expires=Tue, 13-Feb-2018 03:40:32 GMT; Max-Age=86400; path=/; secure; HttpOnly Content-Type: text/html; charset=utf-8 Server: Apache Date: Mon, 12 Feb 2018 03:40:32 GMT Content-Security-Policy: script-src https: 'unsafe-inline' 'unsafe-eval' Pragma: no-cache Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 19 Nov 1981 08:52:00 GMT