date: |
Wed, 02 Oct 2024 05:20:19 GMT |
content-type: |
text/html; charset=utf-8 |
transfer-encoding: |
chunked |
connection: |
close |
link: |
<https://contents.mediadecathlon.com>; rel=preconnect, </client/style/vtmn-tailwind.e8882ee243e581986aed.css>; rel=preload; as=style, </client/style/vtmn-style.88921bae214f13da8115.css>; rel=preload; as=style, </client/style/vtmn-new-visual-identity.baf19d8b0ed007285903.css>; rel=preload; as=style, </client/style/style.7f36042c4110b6b5cffb.css>; rel=preload; as=style, </client/app/client.14ad4475ec21b6e84106.js>; rel=preload; as=script |
vary: |
Accept-Encoding |
referrer-policy: |
no-referrer-when-downgrade |
x-frame-options: |
SAMEORIGIN |
x-xss-protection: |
1; mode=block |
x-content-type-options: |
nosniff |
x-permitted-cross-domain-policies: |
master-only |
set-cookie: |
NFS_USER_ID=9b4a5afa-0e0b-4696-929f-d31e6e49f47f; Max-Age=15724800; Expires=Wed, 02 Apr 2025 05:20:19 GMT; Path=/; Secure,PLAY_LANG=hu; Path=/,ACTIVE_USER=y;Max-Age=900;HttpOnly;Secure;Path=/,__cf_bm=7OH8lQXUDZKtGT30w5VDX1e2a3T3PHTCVUQHfDrg_BM-1727846419-1.0.1.1-Dk2SP2InK05gkyKEkQzCkeTpaAUZPQamlxTVbCO6L_nnvy6O1ig6GOtZOTny4W8AazIDYZ14TCZccyZjzgO7Tg; path=/; expires=Wed, 02-Oct-24 05:50:19 GMT; domain=.www.decathlon.hu; HttpOnly; Secure; SameSite=None,_cfuvid=yM2EFBVzQOxTogwRUdtYS.muy0of6CfeZz.ixzBQMbo-1727846419432-0.0.1.1-604800000; path=/; domain=.www.decathlon.hu; HttpOnly; Secure; SameSite=None |
content-security-policy: |
block-all-mixed-content ;upgrade-insecure-requests ;default-src 'self' *.criteo.com *.criteo.net adventori.com checkoutshopper-live.adyen.com checkoutshopper-test.adyen.com *.klarnaevt.com *.klarna.com *.klarnacdn.com *.abtasty.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.abtasty.com *.y-track.com *.google-analytics.com *.googletagmanager.com www.googletagmanager.com vjs.zencdn.net www.google.com/recaptcha/ www.gstatic.com/recaptcha/ ui.onepay.decathlon.net *.paypal.com *.braintreegateway.com *.brightcove.net *.trylive.com *.googleapis.com sdk.privacy-center.org sdk.woosmap.com www.booxi.eu appmobile-bridge-js.s3-eu-west-1.amazonaws.com *.woosmap.com ui.onepay-qualification.decathlon.io cdn.tagcommander.com *.facebook.net *.dynatrace.com platform.commandersact.com *.commander1.com *.criteo.com *.criteo.net *.adnxs.com adventori.com www.googleadservices.com bat.bing.com *.salecycle.com *.doubleclick.net *.hotjar.com redirect3536.tagcommander.com *.oppwa.com oppwa.com checkoutshopper-live.adyen.com checkoutshopper-test.adyen.com *.klarnaevt.com *.klarna.com *.klarnacdn.com *.klarnacdn.net qanda.decathlon.com wurfl.io *.commandersact.com translate.google.com nxtck.com onepay-ui.decathlon.net *.contentsquare.net *.contentsquare.com www.youtube.com wss://*.hotjar.com *.loadbee.com *.decathlon.net via.batch.com *.dynamicyield.com *.klarnaservices.com *.onepay-v2-commons-prod-0ywm.decathlon.io screencapture.kampyle.com screencapture-cdn.kampyle.com resources.digital-cloud.medallia.eu sbt-prod.kampyle.com nebula-cdn.kampyle.com udc-neb.kampyle.com md-scp.kampyle.com resources.digital-cloud-west.medallia.com pay.google.com/gp/p/js/pay.js applepay.cdn-apple.com rum.browser-intake-datadoghq.eu session-replay.browser-intake-datadoghq.eu logs.browser-intake-datadoghq.eu logs.browser-intake-datadoghq.com browser-intake-datadoghq.eu safesizepublic.ucscentral.com google.com/pay creativecdn.com *.creativecdn.com second-life-xps.secondlifebff-prod-bkpr.decathlon.io *.dotomi.com cdn.amplitude.com api.amplitude.com api2.amplitude.com pay.datatrans.com view.publitas.com scripts.publitas.com js.stripe.com *.js.stripe.com static.hotjar.com connect.facebook.net googleads.g.doubleclick.net script.hotjar.com ui.swogo.net js.adsrvr.org gdehu.hit.gemius.pl *.adition.com unpkg.com api.swogo.net tracking.swogo.net player.vimeo.com script.google.com snap.licdn.com px.ads.linkedin.com *.iadvize.com embed.roborobo-widget.hu;connect-src 'self' *.google-analytics.com *.analytics.google.com *.abtasty.com *.y-track.com *.woosmap.com *.brightcove.com *.brightcovecdn.com *.paypal.com *.braintree-api.com *.braintreegateway.com *.decathlon.net *.decathlon.com *.booxi.eu api.privacy-center.org www.facebook.com *.doubleclick.net bat.bing.com api.booxi.eu bf97725pbp.bf.dynatrace.com *.hotjar.com *.hotjar.io *.oppwa.com oppwa.com *.brightcove.net checkoutshopper-live.adyen.com checkoutshopper-test.adyen.com *.klarnaevt.com *.klarna.com *.klarnacdn.com *.klarnacdn.net qanda.decathlon.com booxi-api-be.appspot.com booxi-api.appspot.com sync.commander1.com *.boltdns.net *.akamaihd.net *.contentsquare.net tracking-api-4lasu2nlcq-ew.a.run.app *.googleapis.com wss://*.hotjar.com www.googletagmanager.com via.batch.com ws.batch.com *.dynamicyield.com *.dynamicyield.eu *.klarnaservices.com *.onepay-v2-commons-prod-0ywm.decathlon.io resources.digital-cloud.medallia.eu ubt-lb.digital-cloud.medallia.eu sbt-prod.kampyle.com nebula-cdn.kampyle.com udc-neb.kampyle.com md-scp.kampyle.com resources.digital-cloud-west.medallia.com www.google.com/pay signin.easyence.tech google.com/pay pay.google.com *.creativecdn.com rum.browser-intake-datadoghq.eu session-replay.browser-intake-datadoghq.eu logs.browser-intake-datadoghq.eu logs.browser-intake-datadoghq.com browser-intake-datadoghq.eu second-life-xps.secondlifebff-prod-bkpr.decathlon.io cdn.amplitude.com api.amplitude.com api2.amplitude.com api.stripe.com stats.g.doubleclick.net search-tracking.webgeoservices.com insight.adsrvr.org www.google.hu cf-images.eu-west-1.prod.boltdns.net manifest.prod.boltdns.net maintenance.decathlon.hu wss://ws12.hotjar.com api.swogo.net tracking.swogo.net *.gemius.pl fpc.decathlon.hu player.vimeo.com vimeo.com script.google.com script.googleusercontent.com wss://*.iadvize.com *.iadvize.com pagead2.googlesyndication.com/pagead/landing www.google.com/pagead/landing adservice.google.com/pagead/;img-src 'self' data: blob: *.decathlon.com *.cube-net.org *.cube-net.pub contents.mediadecathlon.com *.google-analytics.com *.googletagmanager.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.paypal.com prod-wt.aws.y-track.com manager.tagcommander.com *.googleapis.com *.abtasty.com *.woosmap.com www.facebook.com www.google.com www.google.es www.google.fr www.google.it www.google.nl www.google.be www.google.pl *.doubleclick.net bat.bing.com *.gstatic.com sync.commander1.com *.atdmt.com tag.goldenbees.fr *.crm4d.com *.adsrvr.org *.adnxs.com sdk.privacy-center.org checkoutshopper-live.adyen.com checkoutshopper-test.adyen.com *.klarnaevt.com *.klarna.com *.klarnacdn.com *.klarnacdn.net voucher.decathlon.net apigift.decathlon.com site.booxi.com www.mediadecathlon.com *.boltdns.net *.mediadecathlon.com *.contentsquare.net *.googleadservices.com adservice.google.com wss://*.hotjar.com via.batch.com ws.batch.com icons.batch.com *.onepay-v2-commons-prod-0ywm.decathlon.io screencaptue-cdn.kampyle.com resources.digital-cloud.medallia.eu udc-neb.kampyle.com nebula-cdn.kampyle.com resources.digital-cloud-west.medallia.com cdn-workshop-pop.decathlon.net *.dotomi.com pay.datatrans.com onepay-widget.decathlon.net *.dynamicyield.com *.klarnaservices.com bcboltbde696aa-a.akamaihd.net www.decathlon.hu 10044342.fls.doubleclick.net 10162697.fls.doubleclick.net maps.gstatic.com www.google.at sync.adotmob.com insight.adsrvr.org www.google.hu cf-images.eu-west-1.prod.boltdns.net manifest.prod.boltdns.net decathlon.hu ui.swogo.net *.adocean.pl px.ads.linkedin.com *.iadvize.com embed.roborobo-widget.hu;style-src 'self' 'unsafe-inline' www.booxi.eu fonts.googleapis.com *.decathlon.com *.oppwa.com oppwa.com checkoutshopper-live.adyen.com checkoutshopper-test.adyen.com *.klarnaevt.com *.klarna.com *.klarnacdn.com *.abtasty.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.mediadecathlon.com wss://*.hotjar.com scripts.publitas.com *.klarnacdn.net *.onepay-v2-commons-prod-0ywm.decathlon.io resources.digital-cloud.medallia.eu screencaptue-cdn.kampyle.com nebula-cdn.kampyle.com md-scp.kampyle.com resources.digital-cloud-west.medallia.com second-life-xps.secondlifebff-prod-bkpr.decathlon.io storage.googleapis.com/sl-front-xp-bucket-4v-tmoq/account/ storage.googleapis.com/sphere-assets-prod-71-hbfe/ onepay-widget.decathlon.net pay.datatrans.com *.dynamicyield.com *.dynamicyield.eu unpkg.com fronteuhupr.cube-net.pub www.google.hu cf-images.eu-west-1.prod.boltdns.net decathlon.hu ui.swogo.net *.iadvize.com embed.roborobo-widget.hu;font-src 'self' data: *.decathlon.com fonts.gstatic.com *.oppwa.com oppwa.com *.abtasty.com qanda.decathlon.com *.googleapis.com *.gstatic.com *.klarnacdn.net *.onepay-v2-commons-prod-0ywm.decathlon.io resources.digital-cloud.medallia.eu nebula-cdn.kampyle.com resources.digital-cloud-west.medallia.com cdn-workshop-pop.decathlon.net second-life-xps.secondlifebff-prod-bkpr.decathlon.io *.dynamicyield.com *.dynamicyield.eu unpkg.com fronteuhupr.cube-net.pub decathlon.hu *.iadvize.com;object-src view.publitas.com;base-uri 'self';worker-src 'self' blob: via.batch.com;media-src 'self' blob: secure.brightcove.com *.brightcove.com *.brightcove.net *.boltdns.net *.mediadecathlon.com *.criteo.com bcboltbde696aa-a.akamaihd.net *.iadvize.com;frame-src 'self' *.youtube.com www.google.com/recaptcha/ saas.trylive.com/ site.booxi.eu/ reviews.decathlon.com www.facebook.com *.doubleclick.net *.atdmt.com c.paypal.com checkout.paypal.com www.paypal.com *.hotjar.com *.oppwa.com oppwa.com *.brightcove.net checkoutshopper-live.adyen.com checkoutshopper-test.adyen.com *.klarnaevt.com *.klarna.com *.klarnacdn.com qanda.decathlon.com reviews-collect-eu.satisphere.decathlon.net *.mediadecathlon.com view.publitas.com www.pinterest.com *.abtasty.com *.decathlon.net wss://*.hotjar.com screencapture.kampyle.com nebula-cdn.kampyle.com resources.digital-cloud.medallia.eu resources.digital-cloud-west.medallia.com pay.google.com safesizepublic.ucscentral.com *.klarnaservices.com creativecdn.com *.creativecdn.com pay.datatrans.com js.stripe.com *.js.stripe.com hooks.stripe.com 10044342.fls.doubleclick.net 10162697.fls.doubleclick.net insight.adsrvr.org vars.hotjar.com help.decathlon.hu match.adsrvr.org www.google.hu *.gemius.pl player.vimeo.com *.iadvize.com cdn-eu.dynamicyield.com st-eu.dynamicyield.com embed.roborobo-widget.hu chat.roborobo-widget.hu productai.zalehy.dev;frame-ancestors 'self' embed.roborobo-widget.hu productai.zalehy.dev; |
cache-control: |
max-age=0, reload, no-cache, no-store, must-revalidate |
strict-transport-security: |
max-age=15768000; includeSubDomains; preload |
cf-cache-status: |
DYNAMIC |
server: |
cloudflare |
cf-ray: |
8cc23e1799381c93-AMS |