HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Wed, 26 Feb 2020 10:58:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: ALLOW-FROM https://www.willemen.be/
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com cdnjs.cloudflare.com assets.zendesk.com connect.facebook.net *.addthis.com *.googletagmanager.com *.twitter.com *.typekit.net *.ytimg.com *.mailchimp.com *.list-manage.com *.campaign-archive1.com *.campaign-archive.com *.willemen.be *.syndication.twimg.com *.twitter.com *.typekit.net ; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.mailchimp.com *.twitter.com *.twimg.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' *.twimg.com *.youtube.com *.google-analytics.com *.typekit.net *.facebook.com *.doubleclick.net *.googleapis.com *.gstatic.com *.mailchimp.com *.twitter.com *.googletagmanager.com data: *.cdninstagram.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.sanitechniek.be  *.youtube.com assets.zendesk.com *.facebook.com s-static.ak.facebook.com tautt.zendesk.com *.twitter.com *.addthis.com *.facebook.net *.willemen.be *.devisubox.com *.facebook.com *.syndication.twimg.com *.twitter.com *.vimeo.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.typekit.net *.gstatic.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.addthis.com *.typekit.net *.google-analytics.com *.facebook.com *.doubleclick.net; report-uri /admin/config/system/seckit/csp-report
X-Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com cdnjs.cloudflare.com assets.zendesk.com connect.facebook.net *.addthis.com *.googletagmanager.com *.twitter.com *.typekit.net *.ytimg.com *.mailchimp.com *.list-manage.com *.campaign-archive1.com *.campaign-archive.com *.willemen.be *.syndication.twimg.com *.twitter.com *.typekit.net ; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.mailchimp.com *.twitter.com *.twimg.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' *.twimg.com *.youtube.com *.google-analytics.com *.typekit.net *.facebook.com *.doubleclick.net *.googleapis.com *.gstatic.com *.mailchimp.com *.twitter.com *.googletagmanager.com data: *.cdninstagram.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.sanitechniek.be  *.youtube.com assets.zendesk.com *.facebook.com s-static.ak.facebook.com tautt.zendesk.com *.twitter.com *.addthis.com *.facebook.net *.willemen.be *.devisubox.com *.facebook.com *.syndication.twimg.com *.twitter.com *.vimeo.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.typekit.net *.gstatic.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.addthis.com *.typekit.net *.google-analytics.com *.facebook.com *.doubleclick.net; report-uri /admin/config/system/seckit/csp-report
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com cdnjs.cloudflare.com assets.zendesk.com connect.facebook.net *.addthis.com *.googletagmanager.com *.twitter.com *.typekit.net *.ytimg.com *.mailchimp.com *.list-manage.com *.campaign-archive1.com *.campaign-archive.com *.willemen.be *.syndication.twimg.com *.twitter.com *.typekit.net ; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.mailchimp.com *.twitter.com *.twimg.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' *.twimg.com *.youtube.com *.google-analytics.com *.typekit.net *.facebook.com *.doubleclick.net *.googleapis.com *.gstatic.com *.mailchimp.com *.twitter.com *.googletagmanager.com data: *.cdninstagram.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.sanitechniek.be  *.youtube.com assets.zendesk.com *.facebook.com s-static.ak.facebook.com tautt.zendesk.com *.twitter.com *.addthis.com *.facebook.net *.willemen.be *.devisubox.com *.facebook.com *.syndication.twimg.com *.twitter.com *.vimeo.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.typekit.net *.gstatic.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.addthis.com *.typekit.net *.google-analytics.com *.facebook.com *.doubleclick.net; report-uri /admin/config/system/seckit/csp-report
X-Content-Type-Options: nosniff
Content-Language: nl
X-UA-Compatible: IE=edge
X-Generator: Drupal 7 (https://www.drupal.org)
Link: <https://www.willemen.be/sites/default/files/DJI_0130.jpg>; rel="image_src",<https://www.willemen.be/nl>; rel="canonical",<https://www.willemen.be/nl>; rel="shortlink"