Headers of https://sestolab.pp.ua

HTTP/1.1 200 OK
Server
nginx/1.19.2
Date
Fri, 19 Feb 2021 20:19:36 GMT
Content-Type
text/html; charset=utf-8
Connection
close
Vary
Accept-Encoding
X-XSS-Protection
1; mode=block
Expires
Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control
no-store, no-cache, must-revalidate
Pragma
no-cache
Vary
Accept,Accept-Encoding
Feature-Policy
microphone 'none'; payment 'none'; sync-xhr 'self' https://sestolab.pp.ua
Set-Cookie
PHPSESSID=4508be4ef8b9d30c861800a924f0700f; path=/; HttpOnly; Secure; SameSite=Strict; __Secure-valid-with-secure=1; __Host-valid-with-secure-and-path=1
X-Frame-Options
SAMEORIGIN
Strict-Transport-Security
max-age=31536000; preload; includeSubdomains
Content-Security-Policy
default-src 'self'; connect-src https:; font-src https: data:; frame-src https: sestolab:; frame-ancestors 'self' https://vk.com; img-src https: data:; media-src https:; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' https:;style-src 'unsafe-inline' https:; form-action 'self'; base-uri 'self'; block-all-mixed-content; upgrade-insecure-requests;
Referrer-Policy
no-referrer
X-Content-Type-Options
nosniff
Strict-Transport-Security
max-age=31536000;