HTTP/1.1 200 OK
Server: nginx
Date: Sun, 20 Jan 2019 00:38:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Vary: Accept-Encoding
Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private
pragma: no-cache
expires: -1
Strict-Transport-Security: max-age=31536000
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self';connect-src 'self' widgets.ekomi.com *.easybill.de *.paymill.de *.paymill.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' sw-assets.ekomiapps.de *.doubleclick.net *.google.de *.google.com *.google.at *.google.ch *.googletagmanager.com *.paymill.de *.paymill.com *.google-analytics.com *.googleadservices.com d2wy8f7a9ursnm.cloudfront.net connect.facebook.net sw-assets.ekomiapps.de bat.bing.com;img-src 'self' data: sw-assets.ekomiapps.de *.googleadservices.com *.vimeocdn.com *.doubleclick.net notify.bugsnag.com *.paypalobjects.com online.swagger.io *.google-analytics.com *.google.com *.google.de *.google.at *.google.ch  www.facebook.com *.bing.com *.gstatic.com api.figo.me;style-src 'self' 'unsafe-inline' s3.eu-central-1.amazonaws.com sw-assets.ekomiapps.de widgets.ekomi.com fonts.googleapis.com *.google.com;font-src 'self' data: themes.googleusercontent.com fonts.gstatic.com;frame-src 'self' *.googleadservices.com ssl.kaptcha.com *.paymill.de *.paymill.com *.mediafinanz.de *.google.de *.google.com *.google.at *.google.ch *.doubleclick.net player.vimeo.com *.facebook.com *.youtube.com *.youtube.de easyfinance.elbe-finanzgruppe.de;object-src 'self';report-uri https://app.easybill.de/csp-report