HTTP/1.1 200 OK
Cache-Control: max-age=0
Content-Encoding: gzip
Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; img-src 'self' data: https://*.google-analytics.com https://*.facebook.com https://*.facebook.net https://*.google.com https://*.google.com.br https://*.doubleclick.net https://*.tiny.com.br https://*.googletagmanager.com https://*.gstatic.com https://*.googleadservices.com; font-src 'self' data: https://*.typekit.net https://*.gstatic.com https://*.googleadservices.com https://*.tiny.com.br; style-src 'self' 'unsafe-inline' https://*.typekit.net https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.facebook.net https://*.facebook.com https://*.googleadservices.com https://*.doubleclick.net https://*.gstatic.com http://*.googleadservices.com https://*.youtube.com https://*.ytimg.com; child-src 'self' https://*.youtube.com https://*.doubleclick.net https://*.facebook.com https://*.google.com https://*.google.com.br https://*.gstatic.com https://*.googlesyndication.com https://*.tiny.com.br https://tiny.com.br; frame-ancestors 'self' https://*.mercadoshops.com.br https://*.tiny.com.br; connect-src 'self' https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.doubleclick.net https://*.youtube.com; report-uri https://erp.tiny.com.br/webhook/csp/report_handler.php
Content-Type: text/html;charset=utf-8
Date: Sun, 31 May 2020 14:44:05 GMT
Expires: Sun, 31 May 2020 14:44:05 GMT
Server: Apache
Strict-Transport-Security: max-age=2592000
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
transfer-encoding: chunked
Connection: keep-alive