HTTP/1.1 200 OK
Server: nginx
Date: Mon, 09 Sep 2019 18:21:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Link: <https://www.syncasso.nl/wp-json/>; rel="https://api.w.org/"
Link: <https://www.syncasso.nl/>; rel=shortlink
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000;
Content-Security-Policy: default-src 'self'; script-src data: 'self' 'unsafe-inline' 'unsafe-eval' https://chimpstatic.com https://chat.syncasso.nl https://beheer.syncasso.nl https://syncas.accept2web.nl https://syncas-server.accept2web.nl https://ajax.googleapis.com https://widget.surveymonkey.com https://*.list-manage.com https://downloads.mailchimp.com https://maps.googleapis.com https://assets.olark.com https://apis.google.com https://cdn.polyfill.io https://analytics.twitter.com https://static.ads-twitter.com https://script.hotjar.com https://statis.ads-twitter.com https://nrpc.olark.com https://knrpc.olark.com https://googleads.g.doubleclick.net https://platform.twitter.com https://static.doubleclick.net https://static.hotjar.com https://static.olark.com https://track.adform.net https://use.typekit.net https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.youtube.com https://api.olark.com; object-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://downloads.mailchimp.com https://cdn.jsdelivr.net https://static.olark.com https://www.youtube.com; img-src 'self' data: https://beheer.syncasso.nl https://syncas.accept2web.nl https://syncas-server.accept2web.nl https://secure.surveymonkey.com https://maps.gstatic.com https://maps.googleapis.com https://secure.gravatar.com http://www.way2web.nl https://t.co https://stats.g.doubleclick.net https://static.olark.com https://www.google-analytics.com https://www.google.com https://www.google.nl https://p.typekit.net https://*.ytimg.com https://log.olark.com; media-src 'self' https://static.olark.com; frame-src 'self' https://www.surveymonkey.com https://www.arbomanagementsysteem.nl https://www.youtube.com https://apis.google.com https://accounts.google.com http://www.facebook.com https://platform.twitter.com https://syndication.twitter.com https://vars.hotjar.com https://www.googletagmanager.com https://static.olark.com; font-src 'self' data: https://cdn.jsdelivr.net https://fonts.gstatic.com https://netdna.bootstrapcdn.com https://use.typekit.net; connect-src 'self' https://beheer.syncasso.nl https://syncas.accept2web.nl https://syncas-server.accept2web.nl https://stats.g.doubleclick.net https://www.google-analytics.com https://nrpc.olark.com https://knrpc.olark.com https://in.hotjar.com https://yoast.com https://sentry.io
Feature-Policy: geolocation 'self'; midi 'self'; sync-xhr 'self'; microphone 'self'; camera 'self'; magnetometer 'self'; gyroscope 'self'; speaker 'self'; fullscreen 'self'; payment 'self'