HTTP/1.1 200 OK
Date: Fri, 17 May 2019 09:43:12 GMT
Server: Apache
Set-Cookie: AL_SESS-S=AQ06K0HScsMm1khT2E2yypUrSOk3qivKFIMW!SS!R0cMMpTPEaAibj7CeXKi_ubUyiMO; Path=/; Secure; HttpOnly; SameSite=Lax
Set-Cookie: AL_BALANCE=$xc/Cf7AwFaG9vx1alA8nJB!Id4Srks0G6cDB47z!n!xQtV65R0D; Path=/; HttpOnly
Content-Length: 63161
Vary: Front-End-HTTPS,X-Forwarded-Proto,Accept-Encoding
X-Content-Type-Options: nosniff
X-Content-Security-Policy: default-src 'self' *.bka.de bka.preview.prod.gsb.bka.zivb.net; base-uri 'self'; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com piwik.itzbund.de; script-src 'self' 'unsafe-eval' *.googleapis.com piwik.itzbund.de;object-src 'self' piwik.itzbund.de; media-src 'self' www.bka.de *.youtube.com www.quirksmode.org *.googleapis.com piwik.itzbund.de bka.preview.prod.gsb.bka.zivb.net; child-src *.facebook.com *.twitter.com *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de; font-src 'self' data: *.googleapis.com *.gstatic.com piwik.itzbund.de; frame-ancestors bka.preview.prod.gsb.bka.zivb.net piwik.itzbund.de  *.facebook.com;
X-Permitted-Cross-Domain-Policies: master-only
X-WebKit-CSP: default-src 'self' *.bka.de bka.preview.prod.gsb.bka.zivb.net; base-uri 'self'; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com piwik.itzbund.de; script-src 'self' 'unsafe-eval' *.googleapis.com piwik.itzbund.de;object-src 'self' piwik.itzbund.de; media-src 'self' www.bka.de *.youtube.com www.quirksmode.org *.googleapis.com piwik.itzbund.de bka.preview.prod.gsb.bka.zivb.net; child-src *.facebook.com *.twitter.com *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de; font-src 'self' data: *.googleapis.com *.gstatic.com piwik.itzbund.de; frame-ancestors bka.preview.prod.gsb.bka.zivb.net piwik.itzbund.de  *.facebook.com;
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: default-src 'self' *.bka.de bka.preview.prod.gsb.bka.zivb.net; base-uri 'self'; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com piwik.itzbund.de; script-src 'self' 'unsafe-eval' *.googleapis.com piwik.itzbund.de;object-src 'self' piwik.itzbund.de; media-src 'self' www.bka.de *.youtube.com www.quirksmode.org *.googleapis.com piwik.itzbund.de bka.preview.prod.gsb.bka.zivb.net; child-src *.facebook.com *.twitter.com *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com *.googleapis.com piwik.itzbund.de; font-src 'self' data: *.googleapis.com *.gstatic.com piwik.itzbund.de; frame-ancestors bka.preview.prod.gsb.bka.zivb.net piwik.itzbund.de  *.facebook.com
X-XSS-Protection: 1;mode=block
Last-Modified: Fri, 17 May 2019 09:32:43 GMT
Expires: Fri, 17 May 2019 09:33:43 GMT
Cache-Control: max-age=60
Content-Language: de
Content-Type: text/html;charset=utf-8