| Content-Security-Policy | report-uri https://cspreport.bol.com/report/b/37 ; default-src 'none' ; connect-src api.bazaarvoice.com chat1.bol.com https://chat1.bol.com https://fbstatic-a.akamaihd.net https://s.s-bol.com https://s3-eu-west-1.amazonaws.com https://www.bol.com s.s-bol.com www.bol.com ; font-src data: fonts.gstatic.com https://fonts.gstatic.com https://secure.ogone.com https://www.bol.com www.bol.com ; frame-src *.mpstat.us answers.bol.com bolfelicitatie.b05-apps.nl chat1.bol.com client.cobrowser.net cm.g.doubleclick.net googleads.g.doubleclick.net https://chat1.bol.com https://client.cobrowser.net https://cm.g.doubleclick.net https://googleads.g.doubleclick.net https://locateandselect.kiala.com https://platform.twitter.com https://s-static.ak.facebook.com https://s3-eu-west-1.amazonaws.com https://secure.ogone.com https://securewebregistrations.net https://view.publitas.com https://www.bol.com https://www.facebook.com https://www.google.com https://www.youtube.com platform.twitter.com review.bol.com static.ak.facebook.com tpc.googlesyndication.com www.bol.com www.facebook.com www.youtube.com ; img-src *.mpstat.us answers.bol.com bol.com bol.ugc.bazaarvoice.com client.cobrowser.net csi.gstatic.com data: ds-aksb-a.akamaihd.net https://*.cloudfront.net https://bol.com https://cbks0.googleapis.com https://cbks1.googleapis.com https://client.cobrowser.net https://csi.gstatic.com https://fbstatic-a.akamaihd.net https://jwpltx.com https://khms0.googleapis.com https://khms1.googleapis.com https://locator.kiala.com https://m.bol.com https://maps.googleapis.com https://maps.gstatic.com https://mts0.googleapis.com https://mts1.googleapis.com https://partner.bol.com https://platform.twitter.com https://s.s-bol.com https://s2.s-bol.com https://s3-eu-west-1.amazonaws.com https://secure.ogone.com https://securewebregistrations.net https://ssl.gstatic.com https://static.bol.com https://static2.bol.com https://stats.g.doubleclick.net https://swa.bol.com https://syndication.twitter.com https://tpc.googlesyndication.com https://view.publitas.com https://weblog.bol.com https://www.bol.com https://www.google-analytics.com https://www.google.com network.bazaarvoice.com pagead2.googlesyndication.com partner.bol.com platform.twitter.com review.bol.com s.s-bol.com s2.s-bol.com static.bol.com wa.bol.com www.bol.com www.google-analytics.com www.google.com ; media-src bolfelicitatie.b05-apps.nl https://*.cloudfront.net https://s.s-bol.com https://static.bol.com https://www.bol.com real1.phononet.de rovimusic.rovicorp.com s.s-bol.com static.bol.com www.bol.com ; object-src bolfelicitatie.b05-apps.nl https://ci-mpsnare.iovation.com https://mpsnare.iesnare.com https://view.publitas.com https://www.bol.com st1.streamzilla.jet-stream.nl www.bol.com ; script-src 'unsafe-eval' 'unsafe-inline' ajax.googleapis.com answers.bol.com bol.com bol.ugc.bazaarvoice.com bolcom.tu-vms.com c.go-mpulse.net cdn.syndication.twimg.com cdn.syndication.twitter.com chat1.bol.com client.cobrowser.net connect.facebook.net data: ds-aksb-a.akamaihd.net https://addressvalidation.s-bol.com https://ajax.googleapis.com https://apis.google.com https://bol.com https://c.go-mpulse.net https://cbks0.googleapis.com https://chat1.bol.com https://ci-mpsnare.iovation.com https://client.cobrowser.net https://connect.facebook.net https://d31qbv1cthcecs.cloudfront.net https://fbstatic-a.akamaihd.net https://live.adyen.com https://maps.googleapis.com https://maps.gstatic.com https://mts0.googleapis.com https://mts1.googleapis.com https://partner.bol.com https://platform.twitter.com https://s.s-bol.com https://s.ytimg.com https://s2.s-bol.com https://s3-eu-west-1.amazonaws.com https://secure.ogone.com https://securepubads.g.doubleclick.net https://securewebregistrations.net https://ssl.p.jwpcdn.com https://static.bol.com https://stats.g.doubleclick.net https://tpc.googlesyndication.com https://translate.googleapis.com https://view.publitas.com https://weblog.bol.com https://www.bol.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://www.youtube.com magpie-static.ugc.bazaarvoice.com mpsnare.iesnare.com network.bazaarvoice.com pagead2.googlesyndication.com partner.bol.com partner.googleadservices.com platform.twitter.com pubads.g.doubleclick.net review.bol.com s.s-bol.com s2.s-bol.com searchsuggestions.s-bol.com static.bol.com tpc.googlesyndication.com tu.tu-vms.com weblog.bol.com www.bol.com www.google-analytics.com www.googletagservices.com zoeksuggesties.s-bol.com ; style-src 'unsafe-inline' answers.bol.com bol.com bol.ugc.bazaarvoice.com fonts.googleapis.com https://bol.com https://fonts.googleapis.com https://partner.bol.com https://platform.twitter.com https://s.s-bol.com https://s2.s-bol.com https://secure.ogone.com https://securewebregistrations.net https://static.bol.com https://view.publitas.com https://www.bol.com partner.bol.com platform.twitter.com review.bol.com s.s-bol.com s2.s-bol.co |