Cache-Control | no-store, must-revalidate, no-cache |
Pragma | no-cache |
Transfer-Encoding | chunked |
Content-Type | text/html; charset=utf-8 |
Content-Encoding | gzip |
Expires | Sat, 28 Jan 2017 12:44:36 GMT |
Vary | Accept-Encoding |
X-Content-Type-Options | nosniff |
X-Frame-Options | SAMEORIGIN |
X-XSS-Protection | 1; mode=block |
Content-Security-Policy-Report-Only | default-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com tinymce.cachefly.net ajax.googleapis.com maxcdn.bootstrapcdn.com code.angularjs.org;style-src 'self' 'unsafe-inline' code.jquery.com tinymce.cachefly.net maxcdn.bootstrapcdn.com fonts.googleapis.com hello.myfonts.net;img-src 'self' data: www.gravatar.com tinymce.cachefly.net code.jquery.com;font-src 'self' tinymce.cachefly.net maxcdn.bootstrapcdn.com fonts.gstatic.com;connect-src *;media-src 'none';object-src 'none';child-src 'self' maps.google.ch www.google.com player.vimeo.com;frame-ancestors 'self';report-uri https://report-uri.io/report/gvccms; |