HTTP/1.1 200 OK
Date: Sat, 27 Aug 2022 17:41:46 GMT
Server: Apache
Content-Language: en
X-TYPO3-Parsetime: 0ms
Strict-Transport-Security: max-age=31536000; preload
Set-Cookie: site-language-preference=0; Path=/; Max-Age=2592000; HttpOnly; secure
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy:     default-src 'self' *.nrw.de;    script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com *.cloudflare.com cdn.jsdelivr.net *.etracker.com *.etracker.de *.ytimg.com *.cookiebot.com *.myfonts.net *.dynamics.com *.azureedge.net *.instagram.com *.linkedin.com *.spotify.com;    style-src 'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com *.cloudflare.com cdn.jsdelivr.net *.cookiebot.com *.myfonts.net *.dynamics.com *.azureedge.net *.instagram.com *.linkedin.com *.spotify.com;    font-src *;    img-src data: *;    frame-ancestors 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.cookiebot.com start.video-stream-hosting.de consentcdn.cookiebot.com btl-x-stream.de *.dynamics.com;    frame-src   'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de *.video-stream-hosting.de btl-x-stream.de *.youtube-nocookie.com *.dynamics.com *.cookiebot.com *.myfonts.net *.azureedge.net *.instagram.com *.linkedin.com *.spotify.com;    child-src 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de *.youtube-nocookie.com *.issuu.com *.etracker.de *.cookiebot.com *.webstream.eu webstream.eu btl-x-stream.de;    object-src 'self';    connect-src 'self' *.etracker.de *.etracker.com consentcdn.cookiebot.com *.dynamics.com matomo-381.nrw.de;    media-src *;
Vary: Host,Accept-Encoding
Cache-Control: max-age=0
Expires: Sat, 27 Aug 2022 17:41:46 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: master-only
X-UA-Compatible: IE=edge
Content-Length: 90305
Content-Type: text/html; charset=utf-8