| server: |
Apache |
| access-control-max-age: |
900 |
| access-control-allow-headers: |
X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Market, DPZ-Language, DPZ-Market, dptxid, x-mach-name, dpz-pattern |
| access-control-allow-methods: |
POST, GET, OPTIONS, DELETE, PUT |
| access-control-allow-credentials: |
true |
| x-powered-by: |
Express |
| content-type: |
text/html; charset=utf-8 |
| etag: |
"b226-hQZVLqmwSFyXCh8oUNFJz+aGjb8-gzip" |
| x-frame-options: |
SAMEORIGIN |
| date: |
Tue, 01 Oct 2024 13:18:45 GMT |
| content-length: |
45606 |
| connection: |
close |
| set-cookie: |
savedLang=ZW4%3D; Path=/; Expires=Wed, 02 Oct 2024 13:18:45 GMT; HttpOnly; Secure; SameSite=Strict,ECOM31578=9; Path=/; Version=1; Max-Age=1209600; SameSite=strict; Secure,restaurants=true; Path=/; Version=1; Max-Age=1209600; SameSite=strict; Secure,X-DPZ-ROLLOUT-PHASE-0=NOLO; path=/; Max-Age=31536000; |
| content-security-policy: |
upgrade-insecure-requests; default-src 'unsafe-eval' 'unsafe-inline' 'self' *.dominos.com; font-src data: *.dominos.com fonts.gstatic.com storage.googleapis.com cash-f.squarecdn.com; style-src 'unsafe-inline' blob: *.bing.com *.dominos.com *.gstatic.com *.here.com fonts.googleapis.com www.youtube.com rafd.bingstatic.com *.cash.app; script-src-elem 'unsafe-eval' 'unsafe-inline' *.abmr.net *.appdynamics.com *.bing.com *.demdex.net *.dominos.com *.doubleclick.net *.facebook.com *.google.com *.googleapis.com *.googlesyndication.com *.gstatic.com *.here.com *.mathtag.com *.moatads.com *.ntv.io *.omtrdc.net *.raygun.com *.raygun.io *.turn.com *.vertamedia.com *.virtualearth.net ad.atdmt.com assets.braintreegateway.com c.paypal.com cdnssl.clicktale.net connect.facebook.net ct.pinterest.com ds-aksb-a.akamaihd.net js.braintreegateway.com s.pinimg.com s.yimg.com s.ytimg.com sc-static.net *.snapchat.com ssl.google-analytics.com static.xx.fbcdn.net tags.tiqcdn.com www.googleadservices.com www.paypal.com www.paypalobjects.com www.youtube.com rafd.bingstatic.com web.btncdn.com ink1001.com.micpn.com www.googletagmanager.com analytics.tiktok.com *.liadm.com www.redditstatic.com cdn.quantummetric.com *.go-mpulse.net *.kaptcha.com static-us.afterpay.com static.afterpay.com *.amplitude.com *.cash.app *.sentry.io; script-src 'unsafe-eval' 'unsafe-inline' *.abmr.net *.appdynamics.com *.bing.com *.demdex.net *.dominos.com *.doubleclick.net *.facebook.com *.google.com *.googleapis.com *.googlesyndication.com *.gstatic.com *.here.com *.mathtag.com *.moatads.com *.ntv.io *.omtrdc.net *.raygun.com *.raygun.io *.turn.com *.vertamedia.com *.virtualearth.net ad.atdmt.com assets.braintreegateway.com c.paypal.com cdnssl.clicktale.net connect.facebook.net ct.pinterest.com ds-aksb-a.akamaihd.net js.braintreegateway.com s.pinimg.com s.yimg.com s.ytimg.com sc-static.net *.snapchat.com ssl.google-analytics.com static.xx.fbcdn.net tags.tiqcdn.com www.googleadservices.com www.paypal.com www.paypalobjects.com www.youtube.com rafd.bingstatic.com web.btncdn.com ink1001.com.micpn.com www.googletagmanager.com analytics.tiktok.com *.liadm.com cdn.quantummetric.com *.go-mpulse.net *.kaptcha.com; img-src data: blob: *.akamaihd.net *.bing.com *.clicktale.net *.demdex.net *.dominos.com *.doubleclick.net *.everesttech.net *.googleapis.com *.gstatic.com *.here.com *.ispot.tv *.mathtag.com *.paypal.com www.paypalobjects.com *.pinterest.com *.postrelease.com *.turn.com *.virtualearth.net *.yp.com assets.braintreegateway.com checkout.paypal.com *.agkn.com dsum-sec.casalemedia.com i.ytimg.com pinterest.adsymptotic.com *.tapad.com px.moatads.com ssl.google-analytics.com static.xx.fbcdn.net t.co www.facebook.com www.google.com s.amazon-adsystem.com rp.liadm.com/ beacon.krxd.net click.exacttarget.com click.s11.exacttarget.com analytics.tiktok.com *.liadm.com alb.reddit.com/ *.akstat.io www.googleadservices.com trkn.us *.kaptcha.com *.w55c.net pixel.rubiconproject.com idsync.rlcdn.com *.cash.app; frame-src blob: data: *.appdynamics.com *.cardinalcommerce.com *.demdex.net *.dominos.com *.doubleclick.net *.facebook.com *.google.com *.googlesyndication.com *.kaptcha.com *.pinterest.com *.snapchat.com assets.braintreegateway.com *.paypal.com cdnssl.clicktale.net d.agkn.com pixel.mathtag.com pixel.tapad.com r.dlx.addthis.com snap.adbrn.com so.rlcdn.com www.youtube.com x.skimresources.com bytedance: sslocal: *.powerbi.com www.paypalobjects.com *.cash.app; child-src blob: *.dominos.com assets.braintreegateway.com c.paypal.com cdnssl.clicktale.net *.kaptcha.com; worker-src blob: *.dominos.com cdnssl.clicktale.net; connect-src blob: *.akamaihd.net *.bing.com *.braintree-api.com *.clicktale.net *.demdex.net *.dominos.com *.doubleclick.net *.facebook.com *.google-analytics.com *.here.com *.moatads.com *.omtrdc.net *.raygun.com *.raygun.io *.vertamedia.com *.virtualearth.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com col.eum-appdynamics.com ct.pinterest.com ssp.lkqd.net *.paypal.com *.launchdarkly.com *.cybersource.com *.aciondemand.com *.googleapis.com *.liadm.com/ analytics.tiktok.com *.snapchat.com *.quantummetric.com *.akstat.io *.go-mpulse.net *.kaptcha.com *.googlesyndication.com *.microsoftonline.com www.redditstatic.com pixel-config.reddit.com *.pinterest.com *.tealiumiq.com *.amplitude.com *.sentry.io *.afterpay.com *.google.com google.com; report-uri https://dominoscsp.report-uri.com/r/t/csp/enforce; |
|
