Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: dsbbank.sr
X-CONTENT-TYPE-OPTIONS: nosniff
X-FRAME-OPTIONS: SAMEORIGIN
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-PROTECTION: 1; mode=block
STRICT-TRANSPORT-SECURITY: max-age= 15768000; includeSubDomains
CONTENT-SECURITY-POLICY: default-src 'self' https://www.googletagmanager.com http://*.google.com https://*.google.com http://*.analytics.com https://*.analytics.com https://*.googleadservices.com http://*.googleadservices.com http://*.googleapis.com https://*.googleapis.com http://*.youtube.com https://*.youtube.com http://*.google-analytics.com https://*.google-analytics.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com 'unsafe-eval' 'unsafe-inline';img-src 'self' https://www.google-analytics.com http://*.analytics.com https://*.analytics.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com data:;font-src 'self' http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com data:;style-src 'self' http://*.googleapis.com https://*.googleapis.com data: 'unsafe-inline' 'unsafe-eval';frame-ancestors 'self' http://*.youtube.com https://*.youtube.com data: 'unsafe-inline' 'unsafe-eval';
Set-Cookie: ASP.NET_SessionId=oxdoh44ct3cy4augmlhg2pfv; domain=dsb.sr; path=/; HttpOnly
Date: Tue, 01 Dec 2020 22:01:08 GMT
Vary: Accept-Encoding
Connection: Keep-Alive
x-encoded-content-encoding: gzip
x-encoded-content-length: 8449
|
