| Content-Type | text/html |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| X-Powered-By | Express |
| Content-Security-Policy | default-src 'self' data: op-koti.fi *.op-koti.fi *.cloudfront.net images.contentful.com *.adobedtm.com *.everesttech.net *.demdex.net *.adform.net *.googleapis.com *.gstatic.com opservicesltd.d3.sc.omtrdc.net *.ggpht.com connect.facebook.net *.facebook.com; style-src 'self' data: 'unsafe-inline' op-koti.fi *.op-koti.fi *.cloudfront.net images.contentful.com *.adobedtm.com *.everesttech.net *.demdex.net *.adform.net *.googleapis.com *.gstatic.com opservicesltd.d3.sc.omtrdc.net *.ggpht.com connect.facebook.net *.facebook.com; script-src 'self' data: 'unsafe-inline' op-koti.fi *.op-koti.fi *.cloudfront.net images.contentful.com *.adobedtm.com *.everesttech.net *.demdex.net *.adform.net *.googleapis.com *.gstatic.com opservicesltd.d3.sc.omtrdc.net *.ggpht.com connect.facebook.net *.facebook.com; font-src 'self' data: op-koti.fi *.op-koti.fi *.cloudfront.net images.contentful.com *.adobedtm.com *.everesttech.net *.demdex.net *.adform.net *.googleapis.com *.gstatic.com opservicesltd.d3.sc.omtrdc.net *.ggpht.com connect.facebook.net *.facebook.com; img-src 'self' data: op-koti.fi *.op-koti.fi *.cloudfront.net images.contentful.com *.adobedtm.com *.everesttech.net *.demdex.net *.adform.net *.googleapis.com *.gstatic.com opservicesltd.d3.sc.omtrdc.net *.ggpht.com connect.facebook.net *.facebook.com; |
| Strict-Transport-Security | max-age=31536000; includeSubDomains |
| X-Content-Type-Options | nosniff |
| X-Frame-Options | DENY |
| X-XSS-Protection | 1; mode=block |
| Content-Encoding | gzip |
| Vary | Accept-Encoding |
| X-Cache | Miss from cloudfront |
| Via | 1.1 e2bc21de81a2b5a06f939e3377436b82.cloudfront.net (CloudFront) |
| X-Amz-Cf-Id | 1r7HKmyW9oSoJCCvD_wOb1pzlhFiKot3yhpSYo27GE1NaUKjKv38oQ== |