HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: dsbbank.sr
X-CONTENT-TYPE-OPTIONS: nosniff
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-PROTECTION: 1; mode=block
STRICT-TRANSPORT-SECURITY: max-age= 15768000; includeSubDomains
CONTENT-SECURITY-POLICY: default-src 'self' https://www.googletagmanager.com http://*.google.com https://*.google.com http://*.analytics.com https://*.analytics.com https://*.googleadservices.com http://*.googleadservices.com http://*.googleapis.com https://*.googleapis.com http://*.youtube.com https://*.youtube.com http://*.google-analytics.com https://*.google-analytics.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com 'unsafe-eval' 'unsafe-inline';img-src 'self' https://www.google-analytics.com http://*.analytics.com https://*.analytics.com http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com data:;font-src 'self' http://*.googleapis.com https://*.googleapis.com http://*.gstatic.com https://*.gstatic.com data:;style-src 'self' http://*.googleapis.com https://*.googleapis.com data: 'unsafe-inline' 'unsafe-eval';frame-ancestors 'self' http://*.youtube.com https://*.youtube.com data: 'unsafe-inline' 'unsafe-eval';
Set-Cookie: ASP.NET_SessionId=f5xmizvugdd2dqj4fuwq0mpm; domain=dsb.sr; path=/; HttpOnly
X-Frame-Options: SAMEORIGIN
Date: Mon, 29 Jun 2020 22:13:05 GMT
Connection: close
Content-Length: 39303
Set-Cookie: BIGipServerSitecore-web01.app~Sitecore-web01_pool=370085642.20480.0000; path=/; Httponly; Secure
Vary: Accept-Encoding