HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate,no-cache, no-store, private, must-revalidate
Pragma: no-cache,no-cache
Content-Type: text/html; charset=utf-8
Expires: -1,0
Server: 
Content-Security-Policy: default-src 'self' data: *.omroep.nl *.linkedin.com *.facebook.com *.twitter.com vimeo.com *.vimeo.com *.youtube.com *.panelwizard.com *.kienonderzoek.nl *.kienvragenlijst.nl *.factsnapp.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.facebook.net *.twitter.com *.linkedin.com *.googleadservices.com *.google-analytics.com *.doubleclick.net *.vimeo.com *.youtube.com *.ytimg.com *.factsnapp.com; style-src 'self' data: 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: *.twitter.com *.onlinesucces.nl *.licdn.com *.linkedin.com *.google.com *.google.nl *.google-analytics.com *.doubleclick.net *.panelwizard.com *.kienonderzoek.nl *.kienvragenlijst.nl *.vimeocdn.com *.ytimg.com *.factsnapp.com; font-src 'self' data: fonts.gstatic.com; connect-src 'self' wss://*.panelwizard.com ws://*.panelwizard.bn-local.nl vimeo.com *.googleapis.com *.google.nl; object-src 'self';  report-uri https://www.panelwizard.com/api/html/csp_violation/report.json;
Strict-Transport-Security: max-age=31536000; includeSubDomains;
X-XSS-Protection: 1
X-Frame-Options: SAMEORIGIN
x-content-type-options: nosniff
Referrer-Policy: strict-origin
Date: Wed, 05 Jun 2019 00:50:51 GMT
Content-Length: 66153