img-src 'self' https://khms0.googleapis.com https://khms1.googleapis.com https://csi.gstatic.com https://maps.google.com https://maps.gstatic.com https://maps.googleapis.com https://www.facebook.com https://www.google-analytics.com https://stats.g.doubleclick.net https://steamcdn-a.akamaihd.net http://cdn.steamcommunity.com https://cdnjs.cloudflare.com https://cdn.akamai.steamstatic.com;
Transfer-Encoding: chunked
# frame-ancestors 'self' https://www.twitch.tv https://www-akamai.twitch.tv;
Content-Security-Policy:
Referrer-Policy: no-referrer-when-downgrade
default-src 'self' https://googleads.g.doubleclick.net;
Pragma: no-cache
Server: nginx
Cache-Control: no-store, no-cache, must-revalidate
X-XSS-Protection: 1; mode=block
font-src 'self' https://fonts.gstatic.com;
Content-Type: text/html; charset=UTF-8
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Frame-Options: SAMEORIGIN
Set-Cookie: PHPSESSID=e7cejeehnt1d36b6bbbh9pe2u2; path=/
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com;
Date: Fri, 12 Jan 2018 00:32:53 GMT
connect-src 'self' https://googleads.g.doubleclick.net https://apis.google.com;
X-Content-Type-Options: nosniff
HTTP/1.1 200 OK
Expires: Thu, 19 Nov 1981 08:52:00 GMT
frame-src 'self' https://www.twitch.tv https://googleads.g.doubleclick.net https://staticxx.facebook.com https://player.twitch.tv https://meriletfou.fr;
Connection: keep-alive
object-src 'self'
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.google.com https://maps.googleapis.com https://adservice.google.com https://adservice.google.fr https://pagead2.googlesyndication.com https://connect.facebook.net https://www.google-analytics.com https://cdnjs.cloudflare.com;