Faitavecnestle.ca

date: Thu, 07 Aug 2025 18:08:15 GMT
content-type: text/html
content-length: 143
location: https://www.faitavecnestle.ca/
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 96b8b7e27d4cd26d-FRA

HTTP/2 200 
date: Thu, 07 Aug 2025 18:08:15 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
cache-control: max-age=3600, public
content-language: fr
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
expires: Sun, 19 Nov 1978 05:00:00 GMT
vary: Cookie,Accept-Encoding
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.pricespider.com pricespider.com static.addtoany.com *.youtube.com *.lift.acquia.com *.googletagmanager.com *.gigya.com cdn.cookielaw.org js-agent.newrelic.com *.google-analytics.com s.pinimg.com *.googleadservices.com *.cloudfront.net connect.facebook.net googleads.g.doubleclick.net *.google.com w.usabilla.com cdn.gbqofs.com *.madewithnestle.ca madewithnestle.ca cdn.jsdelivr.net maxcdn.bootstrapcdn.com ajax.googleapis.com cdnjs.cloudflare.com www.gstatic.com d.la1-c1-am3.salesforceliveagent.com johnpolacek.github.io service.force.com ct.pinterest.com cdn.bensimonbyrne.com  data-na.faitavecnestle.ca data-na.madewithnestle.ca *.salesforceliveagent.com *.qualtrics.com nestlecesomni.my.salesforce-sites.com nestlecesomni.my.salesforce.com static.lightning.force.com mapbox.com *.mapbox.com *.my.salesforce.com *.lightning.force.com:* *.wayvia.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com pricespider.com *.pricespider.com *.madewithnestle.ca cdnjs.cloudflare.com service.force.com *.typekit.net cdn.bensimonbyrne.com nestlecesomni.my.salesforce-sites.com mapbox.com *.mapbox.com; img-src 'self' *.googletagmanager.com cdn.cookielaw.org *.doubleclick.net *.google.com *.madewithnestle.ca data: images.aws.nestle.recipes img.youtube.com *.gigya.com data: www.google.com ct.pinterest.com www.facebook.com www.google.ca d6tizftlrpuof.cloudfront.net pricespider.com *.pricespider.com *.qualtrics.com www.google.co.uk e w.usabilla.com *.wayvia.com; frame-src 'self' static.addtoany.com *.youtube.com *.gigya.com *.nestleinmarket.ca naturesbountyca.jebbit.com service.force.com ct.pinterest.com td.doubleclick.net *.googletagmanager.com *.doubleclick.net *.google.com *.snipp.us nestleglobalmktg.qualtrics.com  *.salesforce.com *.facebook.com; frame-ancestors 'self' www.google.com; child-src 'self' static.addtoany.com *.youtube.com *.gigya.com *.nestleinmarket.ca *.madewithnestle.ca blob:; font-src 'self' fonts.gstatic.com *.madewithnestle.ca cdnjs.cloudflare.com use.typekit.net data:; connect-src 'self' *.lift.acquia.com cdn.cookielaw.org *.google-analytics.com geolocation.onetrust.com *.gbqofs.io *.google.com googleads.g.doubleclick.net *.pinterest.com *.gigya.com *.madewithnestle.ca login.faitavecnestle.ca privacyportal-ch.onetrust.com wtbng.pricespider.com bam.nr-data.net adservice.google.com stats.g.doubleclick.net data-na.faitavecnestle.ca data-na.madewithnestle.ca *.acquia.io *.qualtrics.com *.doubleclick.net *.google.ca  nestlecesomni.my.salesforce-sites.com mapbox.com *.mapbox.com pricespider.com *.pricespider.com wss://wtbstream.pricespider.com *.haagen-dazs.ca *.googlesyndication.com www.facebook.com www.google.co.uk *.googleadservices.com *.wayvia.com ; report-uri /report-csp-violation; upgrade-insecure-requests
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000
x-drupal-cache: MISS
last-modified: Thu, 07 Aug 2025 01:56:44 GMT
x-request-id: v-c50b5ea8-7331-11f0-b504-676d272d3530
x-ah-environment: prod
via: varnish
x-cache: HIT
x-cache-hits: 8
cf-cache-status: HIT
server: cloudflare
cf-ray: 96b8b7e2cff33412-FRA