JP.AUTOBLOG.COM Revue du site Web

HTTP/1.1 200
Date: Sun, 19 May 2024 23:03:24 GMT
Content-Type: text/html;charset=UTF-8
Server: ATS
Set-Cookie: _ab_user=70; Expires=Tue, 18 Jun 2024 23:03:23 GMT; Path=/
Cache-Control: no-store
X-AOL-SNH: 8a98305d893795ca095664415094eb48
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Content-Security-Policy: block-all-mixed-content ; connect-src 'self' blob: https://*.3lift.com https://*.adsrvr.org https://*.autoblog.com https://*.casalemedia.com https://*.criteo.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.here.com https://*.hereapi.com https://*.liadm.com https://*.media.net https://*.openx.net https://*.pubmatic.com https://*.rubiconproject.com https://*.safeframe.googlesyndication.com https://*.spot.im https://*.taboola.com https://*.yahoo.com https://*.yahoo.net https://*.yieldmo.com https://analytics.google.com https://api-js.mixpanel.com https://csi.gstatic.com https://i.clean.gg https://maps.googleapis.com https://match.sharethrough.com https://pagead2.googlesyndication.com https://s.yimg.com https://sb.scorecardresearch.com https://snapshot.carfax.com https://static.criteo.net https://video.adaptv.advertising.com https://widget.carstory.com https://www.instagram.com; default-src 'none'; font-src 'self' data: 'unsafe-inline' https://*.autoblog.com https://fonts.googleapis.com https://fonts.gstatic.com https://js.api.here.com https://maxcdn.bootstrapcdn.com https://s.aolcdn.com; frame-ancestors 'self'; frame-src 'self' 'unsafe-inline' https://*.3lift.com https://*.adsrvr.org https://*.autoblog.com https://*.casalemedia.com https://*.criteo.com https://*.g.doubleclick.net https://*.lijit.com https://*.media.net https://*.openx.net https://*.pubmatic.com https://*.rubiconproject.com https://*.safeframe.googlesyndication.com https://*.taboola.com https://*.yahoo.com https://*.yahoo.net https://*.yieldmo.com https://console.googletagservices.com https://embed.scribblelive.com https://flo.uri.sh https://js-sec.indexww.com https://match.sharethrough.com https://platform.twitter.com https://rtb.gumgum.com https://s.yimg.com https://tpc.googlesyndication.com https://tsdtocl.com https://www.facebook.com https://www.google.com https://www.instagram.com https://www.linkedin.com https://www.tiktok.com https://www.youtube-nocookie.com https://www.youtube.com; img-src 'self' data: https: https://ups.analytics.yahoo.com; manifest-src 'self' https://*.autoblog.com; media-src blob: https://*.autoblog.com https://*.yahoo.com https://*.yahoo.net https://media.blubrry.com https://media.zenfs.com https://s.aolcdn.com; object-src 'none'; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation allow-top-navigation allow-top-navigation-by-user-activation allow-modals; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.autoblog.com https://*.g.doubleclick.net https://*.spot.im https://*.tiktokcdn-us.com https://*.vast.com https://*.yahoo.com https://*.yahoo.net https://adservice.google.com https://assets.video.yahoo.net https://cadmus.script.ac https://cdn.mxpnl.com https://consent.cmp.oath.com https://console.googletagservices.com https://js.api.here.com https://maps.googleapis.com https://o.aolcdn.com https://pagead2.googlesyndication.com https://platform.twitter.com https://s.aolcdn.com https://s.yimg.com https://snapshot.carfax.com https://static.criteo.net https://tpc.googlesyndication.com https://webc2s-oao.pubgw.yahoo.com https://widget.carstory.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.instagram.com https://www.tiktok.com; style-src 'self' 'unsafe-inline' https://*.aolcdn.com https://*.autoblog.com https://*.tiktokcdn-us.com https://assets.video.yahoo.net https://fonts.googleapis.com https://js.api.here.com https://maxcdn.bootstrapcdn.com https://s.yimg.com https://snapshot.carfax.com https://widget.carstory.com; upgrade-insecure-requests ; worker-src 'self' blob:;
vary: accept-encoding
Content-Encoding: gzip
Content-Language: en-US
Age: 2
Strict-Transport-Security: max-age=31536000
Referrer-Policy: no-referrer-when-downgrade
X-Frame-Options: SAMEORIGIN
Transfer-Encoding: chunked
Connection: keep-alive
Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Set-Cookie: A1=d=AQABBDuFSmYCEBiR-Wq3AkJP0IkeBzr_vxsFEgEBAQHWS2ZUZtxF0iMA_eMAAA&S=AQAAAvfYFHeOD76DNfmSvCIHUJ4; Expires=Tue, 20 May 2025 05:03:24 GMT; Max-Age=31557600; Domain=.autoblog.com; Path=/; SameSite=Lax; Secure; HttpOnly
Set-Cookie: A3=d=AQABBDuFSmYCEBiR-Wq3AkJP0IkeBzr_vxsFEgEBAQHWS2ZUZtxF0iMA_eMAAA&S=AQAAAvfYFHeOD76DNfmSvCIHUJ4; Expires=Tue, 20 May 2025 05:03:24 GMT; Max-Age=31557600; Domain=.autoblog.com; Path=/; SameSite=None; Secure; HttpOnly
Set-Cookie: A1S=d=AQABBDuFSmYCEBiR-Wq3AkJP0IkeBzr_vxsFEgEBAQHWS2ZUZtxF0iMA_eMAAA&S=AQAAAvfYFHeOD76DNfmSvCIHUJ4; Domain=.autoblog.com; Path=/; SameSite=Lax; Secure