HTTP/1.1 200 OK
Server: nginx
Date: Sat, 20 Apr 2019 22:23:28 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 104180
Connection: keep-alive
Vary: Accept-Encoding, Cookie
Cache-Control: max-age=3, must-revalidate
Last-Modified: Sat, 20 Apr 2019 21:55:36 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Strict-Transport-Security: max-age=63072000; includeSubdomains; 
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube-nocookie.com *.flickr.com tde-stats.spin-ag.de *.telefonica.de; style-src 'self' 'unsafe-inline'; connect-src 'self'; media-src 'self' *.youtube-nocookie.com *.flickr.com; child-src 'self' *.telefonica.de *.udldigital.de *.youtube-nocookie.com; object-src 'self'; form-action 'self'; img-src 'self' *.udldigital.de *.telefonica.de *.flickr.com tde-stats.spin-ag.de data:
X-Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube-nocookie.com *.flickr.com tde-stats.spin-ag.de *.telefonica.de; style-src 'self' 'unsafe-inline'; connect-src 'self'; media-src 'self' *.youtube-nocookie.com *.flickr.com; child-src 'self' *.telefonica.de *.udldigital.de *.youtube-nocookie.com; object-src 'self'; form-action 'self'; img-src 'self' *.udldigital.de *.telefonica.de *.flickr.com tde-stats.spin-ag.de data:
X-WebKit-CSP: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube-nocookie.com *.flickr.com tde-stats.spin-ag.de *.telefonica.de; style-src 'self' 'unsafe-inline'; connect-src 'self'; media-src 'self' *.youtube-nocookie.com *.flickr.com; child-src 'self' *.telefonica.de *.udldigital.de *.youtube-nocookie.com; object-src 'self'; form-action 'self'; img-src 'self' *.udldigital.de *.telefonica.de *.flickr.com tde-stats.spin-ag.de data: