Corneyandbarrow.com.hk

date: Tue, 08 Oct 2024 00:03:04 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: X-Magento-Vary=5d071cfe1d16f0495a9ece421b3e82055b29700dc5bb9fa65074e777866b41d8; expires=Thu, 07-Nov-2024 00:03:04 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"/rest/V1/skywire/csp/report"}]}
content-security-policy: font-src googleapis.com fonts.gstatic.com 'self' data: *.opayo.eu.elavon.com *.stripe.com *.google.com *.klevu.com *.ksearchnet.com oct8necdneu.azureedge.net static.oct8ne.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.opayo.eu.elavon.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.stripe.com *.google.com www.facebook.com *.arcot.com *.americanexpress.com *.rsa3dsauth.co.uk *.wlp-acs.com authentication.cardinalcommerce.com acs.revolut.com *.live.ext.prod.enfuce.com *.mpts.modirum.com gbemv3dsecure.garanti.com.tr authentication-acs.marqeta.com *.apac.citibank.com verify.monzo.com 3dsec.postfinance.ch clients.smartsecure.tsys.co.uk *.3dsecure.no acs.capitalone.com *.wibmo.com *.ccb.com.cn acs.apata.io 3ds.soldo.com 3ds.nexigroup.com www.rsa3dsauth.com *.edb.com emvacs.bkm.com.tr acs.stripeauthentications.com mycardsecure.com *.acs.cmbchina.com *.six-group.com *.creditmutuel.fr *.hitrust.com foriseu-vbv.mycardplace.com coapacs2c.pingan.com.cn acs.swisscard.ch test.sagepay.com 'self' 'unsafe-inline'; frame-ancestors *.bolt.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.bolt.com https://www.google.com/recaptcha/ www.googletagmanager.com *.google.com *.online-metrix.net *.opayo.eu.elavon.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com sandbox.secure.checkout.visa.com secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.stripe.com www.facebook.com vars.hotjar.com secure7.arcot.com *.oct8ne.com *.doubleclick.net open.spotify.com www.candblibrary.co.uk embed-standalone.spotify.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io addevent.com *.googleapis.com *.gstatic.com *.paypal.com *.opayo.eu.elavon.com ebizmarts-website.s3.amazonaws.com www.gstatic.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com *.stripe.com *.google.com downloads.mailchimp.com gallery.mailchimp.com *.klevu.com *.ksearchnet.com cdn-ukwest.onetrust.com *.candbscene.co.uk mcusercontent.com cookiesuksouth.blob.core.windows.net candbscene.co.uk www.facebook.com oct8necdneu.azureedge.net www.corneyandbarrow.com.hk www.corneyandbarrow.com.sg www.corneyandbarrow.com bam.eu01.nr-data.net *.google-analytics.com *.onetrust.com www.google.com.hk *.oct8ne.com adservice.google.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.exponea.com services.postcodeanywhere.co.uk shopfront.paymebiz.hsbc.com.hk brxcdn.com ssl.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com http://localhost:8082 https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleapis.com addevent.com 'self' data: maps.googleapis.com *.gstatic.com *.online-metrix.net *.opayo.eu.elavon.com testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.stripe.com *.google.com chimpstatic.com downloads.mailchimp.com *.list-manage.com js.klevu.com *.ksearchnet.com api.uk.exponea.com app.uk.exponea.com cdn-ukwest.onetrust.com corne11118.pcapredict.com services.postcodeanywhere.co.uk js-agent.newrelic.com script.hotjar.com *.oct8ne.com connect.facebook.net bam.eu01.nr-data.net static.hotjar.com *.klevu.com *.cloudflare.com *.googletagmanager.com *.google-analytics.com tagmanager.google.com https://cdn-ukwest.onetrust.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com getfirebug.com googleapis.com addevent.com *.gstatic.com *.opayo.eu.elavon.com *.stripe.com *.google.com downloads.mailchimp.com *.klevu.com *.ksearchnet.com services.postcodeanywhere.co.uk *.srverror.com *.fontawesome.com fonts.googleapis.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'none'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src *.corneyandbarrow.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.bolt.com maps.googleapis.com/ *.paypal.com *.opayo.eu.elavon.com thm.visa.com *.stripe.com *.google.com *.klevu.com *.ksearchnet.com geolocation.onetrust.com cdn-ukwest.onetrust.com privacyportal-uk.onetrust.com api.uk.exponea.com app.uk.exponea.com sdk-tracing.exponea.com www.facebook.com bam.eu01.nr-data.net www.google.com adservice.google.com frontal-eu.oct8ne.com *.g.doubleclick.net *.google-analytics.com in.hotjar.com services.postcodeanywhere.co.uk *.hotjar.io *.hotjar.com wss://*.hotjar.com *.oct8ne.com js-agent.newrelic.com *.analytics.google.com *.googletagmanager.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri api.uk.exponea.com 'self' 'unsafe-inline'; report-uri /rest/V1/skywire/csp/report; report-to report-endpoint;
content-security-policy: upgrade-insecure-requests;
content-security-policy: default-src * 'unsafe-eval' 'unsafe-inline' data:; script-src * 'unsafe-eval' 'unsafe-inline'; font-src * data:;
strict-transport-security: max-age=31536000
strict-transport-security: max-age=0
x-content-type-options: nosniff
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-frame-options: SAMEORIGIN
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
cf-cache-status: DYNAMIC
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8cf1dd947dfd117f-ORD
content-encoding: br