Headers of https://am-test.widegroup.eu

HTTP/1.1 302 Found
Date
Thu, 17 Nov 2022 14:31:47 GMT
Server
Strict-Transport-Security
max-age=63072000; includeSubdomains;
X-Content-Type-Options
nosniff
Referrer-Policy
same-origin
X-XSS-Protection
1; mode=block
X-Frame-Options
sameorigin
Location
./pages/UI.php
X-Frame-Options
deny
X-Permitted-Cross-Domain-Policies
none
Expect-CT
enforce, max-age=31536000
Content-Security-Policy
default-src 'self' www.itophub.io;script-src 'self' www.itophub.io 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline';img-src 'self' data: blob: www.itophub.io
Permissions-Policy
accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
Content-Length
0
Connection
close
Content-Type
text/html; charset=UTF-8
HTTP/1.1 302 Found
Date
Thu, 17 Nov 2022 14:31:47 GMT
Server
Expires
Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control
no-store, no-cache, must-revalidate
Pragma
no-cache
Strict-Transport-Security
max-age=63072000; includeSubdomains;
X-Content-Type-Options
nosniff
Referrer-Policy
same-origin
X-XSS-Protection
1; mode=block
Set-Cookie
itop-ffb5bc6b0d3ad4e791061d65c153a36b=asrjvtht015eidb026snras697; path=/;HttpOnly;Secure;SameSite=Strict
X-Frame-Options
sameorigin
Location
https://auth.widegroup.eu/cas/login?service=https%3A%2F%2Fam-test.widegroup.eu%2F.%2Fpages%2FUI.php
X-Frame-Options
deny
X-Permitted-Cross-Domain-Policies
none
Expect-CT
enforce, max-age=31536000
Content-Security-Policy
default-src 'self' www.itophub.io;script-src 'self' www.itophub.io 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline';img-src 'self' data: blob: www.itophub.io
Permissions-Policy
accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
Connection
close
Content-Type
text/html; charset=UTF-8
HTTP/1.1 200 OK
Date
Thu, 17 Nov 2022 14:31:48 GMT
Server
X-XSS-Protection
1; mode=block
X-Content-Type-Options
nosniff
Cache-Control
no-cache, no-store, must-revalidate
Pragma
no-cache
Expires
0
Access-Control-Allow-Origin
*
Access-Control-Allow-Credentials
true
Access-Control-Allow-Headers
*
Access-Control-Allow-Methods
POST,GET
Access-Control-Expose-Headers
*
Access-Control-Max-Age
86400
X-Frame-Options
DENY
Content-Security-Policy
default-src 'self';img-src 'self' data:;style-src 'self';font-src 'self';connect-src 'self';script-src 'self';form-action * https://auth.widegroup.eu;frame-ancestors 'none';
Set-Cookie
widelemonpdata=%7B%22issuerRequestcas%22%3A%221666103628_47476%22%2C%22_url%22%3A%22aHR0cHM6Ly9hdXRoLndpZGVncm91cC5ldS9jYXM%3D%22%2C%22keepPdata%22%3A%5B%22issuerRequestcas%22%2C%22issuerRequestcasPath%22%5D%2C%22issuerTs%22%3A1668695508%2C%22issuerRequestcasPath%22%3A%5B%22login%22%5D%7D; path=/; HttpOnly=1; SameSite=Strict; secure
Strict-Transport-Security
max-age=63072000; includeSubDomains; preload
Referrer-Policy
same-origin
Vary
Accept-Encoding,User-Agent
X-Frame-Options
sameorigin
Permissions-Policy
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=()
X-Permitted-Cross-Domain-Policies
none
Expect-CT
enforce, max-age=31536000
Strict-Transport-Security
max-age=15768000
Connection
close
Content-Type
text/html