Content-Type | text/html; charset=UTF-8 |
Transfer-Encoding | chunked |
Connection | keep-alive |
Keep-Alive | timeout=15 |
Server | Apache |
X-Powered-By | PHP/7.0.27 |
Content-Security-Policy | default-src 'self'; script-src https://www.metzer-eck.de https://cdn.jsdelivr.net https://connect.facebook.net 'unsafe-inline' 'unsafe-eval'; style-src https://www.metzer-eck.de https://fonts.googleapis.com 'unsafe-inline' data:; img-src https://www.metzer-eck.de https://www.facebook.com/ data:; font-src https://www.metzer-eck.de https://fonts.gstatic.com data:; connect-src https://www.metzer-eck.de; child-src https://www.facebook.com https://staticxx.facebook.com 'self'; |
X-Content-Security-Policy | default-src 'self'; script-src https://www.metzer-eck.de https://cdn.jsdelivr.net https://connect.facebook.net 'unsafe-inline' 'unsafe-eval'; style-src https://www.metzer-eck.de https://fonts.googleapis.com 'unsafe-inline' data:; img-src https://www.metzer-eck.de https://www.facebook.com/ data:; font-src https://www.metzer-eck.de https://fonts.gstatic.com data:; connect-src https://www.metzer-eck.de; child-src https://www.facebook.com https://staticxx.facebook.com 'self'; |
X-WebKit-CSP | default-src 'self'; script-src https://www.metzer-eck.de https://cdn.jsdelivr.net https://connect.facebook.net 'unsafe-inline' 'unsafe-eval'; style-src https://www.metzer-eck.de https://fonts.googleapis.com 'unsafe-inline' data:; img-src https://www.metzer-eck.de https://www.facebook.com/ data:; font-src https://www.metzer-eck.de https://fonts.gstatic.com data:; connect-src https://www.metzer-eck.de; child-src https://www.facebook.com https://staticxx.facebook.com 'self'; |
Strict-Transport-Security | max-age=31536000; includeSubDomains |
X-XSS-Protection | 1; mode=block |
X-Frame-Options | SAMEORIGIN |
X-Content-Type-Options | nosniff |
Content-Encoding | gzip |
Vary | Accept-Encoding |