HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Fri, 15 May 2020 20:37:13 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15724800; includeSubdomains;
Referrer-Policy: origin-when-cross-origin
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' *.onewp.net ;   style-src 'unsafe-inline' 'self' data: *.google.com *.facebook.com *.enalyzer.com *.adform.net *.facebook.net *.northfork.se *.elfsight.com *.hotjar.com *.hotjar.io *.onewp.net *.google.com *.googleapis.com use.typekit.net p.typekit.net *.clickdimensions.com *.msecnd.net *.vo.msecnd.net *.azureedge.net *.svc.dynamics.com;   font-src 'self' *.google.com *.google.se  *.facebook.com *.enalyzer.com *.adform.net *.facebook.net fonts.gstatic.com data: *.northfork.se *.hotjar.com *.hotjar.io *.elfsight.com *.onewp.net *.prod.onewp.net *.staging.onewp.net use.typekit.net *.clickdimensions.com *.msecnd.net *.vo.msecnd.net *.azureedge.net *.svc.dynamics.com;   script-src 'self' *.google.com *.google.se *.facebook.com *.enalyzer.com *.adform.net *.facebook.net *.northfork.se *.elfsight.com *.onewp.net *.hotjar.com *.hotjar.io *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.google.com use.typekit.net sc-static.net *.sc-static.net *.clickdimensions.com *.msecnd.net *.vo.msecnd.net *.azureedge.net *.svc.dynamics.com 'unsafe-inline' 'unsafe-eval' blob:;   connect-src 'self' *.google.com *.google.se *.facebook.com *.enalyzer.com *.adform.net *.facebook.net *.northfork.se *.elfsight.com *.onewp.net *.hotjar.com *.hotjar.io *.googleadservices.com *.google-analytics.com yoast.com performance.typekit.net oocd-api.azurewebsites.net *.azureedge.net *.svc.dynamics.com;   worker-src 'self' blob: ;   child-src 'self' blob: ;   img-src 'self' data: *.google.com *.google.se *.facebook.com *.adform.net *.facebook.net *.northfork.se *.elfsight.com *.hotjar.com *.hotjar.io *.cdninstagram.com *.onewp.net *.google-analytics.com *.gstatic.com *.doubleclick.net secure.gravatar.com s.w.org p.typekit.net *.clickdimensions.com *.msecnd.net *.vo.msecnd.net *.azureedge.net *.svc.dynamics.com;   frame-src 'self' *
Link: <https://www.zalo.no/wp-json/>; rel="https://api.w.org/"
Link: <https://www.zalo.no/>; rel=shortlink
X-XSS-Protection: 1; mode=block
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 a29822829c600346e3d9340fbf747f6c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DFW50-C1
X-Amz-Cf-Id: QDzePjA2uRH-WmLeAl_0IuHxjtTdK4SqCaH4bsg4yBDZaabIdeZ7XQ==