HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Set-Cookie: ASP.NET_SessionId=vrnreyqxmeujuthand2xp04y; path=/; secure; HttpOnly
Expect-CT: max-age=300
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Access-Control-Allow-Origin: https://agera.raddabarnen.se
Strict-Transport-Security: max-age=2592000; includeSubDomains; preload
Public-Key-Pins: pin-sha256="pNjob8N9qLZWNfzWLBulJCoCzck+yjPvvjHxQskwtUI="; pin-sha256="5kJvNEMw0KjrCAu7eXY5HZdvyCS13BbA0VJG1RSP91w="; pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg="; max-age=2592000; includeSubDomains
Content-Security-Policy: script-src 'self' data: https://optimize.google.com http://100012771.collect.igodigital.com/ https://dc.ads.linkedin.com/ https://www.linkedin.com/ https://analytics.twitter.com/ https://px.ads.linkedin.com/ https://script.hotjar.com https://sjs.bizographics.com https://static.hotjar.com https://googleads.g.doubleclick.net https://static.ads-twitter.com https://www.googleadservices.com https://connect.facebook.net https://bat.bing.com https://collector-1623.tvsquared.com https://s.ytimg.com https://www.youtube.com https://www.google-analytics.com https://www.googletagmanager.com https://apis.google.com https://ajax.googleapis.com https://dl.episerver.net https://platform.twitter.com https://tagmanager.google.com 'unsafe-inline' 'unsafe-eval';
      worker-src 'self' https://plusone.google.com https://facebook.com https://platform.twitter.com https://www.googletagmanager.com https://tagmanager.google.com;
      frame-src 'self' https://www.youtube.com https://vars.hotjar.com/ https://www.facebook.com/ https://optimize.google.com
Date: Sun, 21 Jul 2019 10:46:18 GMT
Content-Length: 110888