Server: nginx
Content-Type: text/html; charset=UTF-8
Cache-Control: max-age=10800, public
Cache-Control: private
X-Drupal-Dynamic-Cache: HIT
Link: ; rel="shortlink", ; rel="canonical", ; rel="alternate"; hreflang="de", ; rel="revision"
X-UA-Compatible: IE=edge
Content-Language: de
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
X-Generator: Drupal 8 (https://www.drupal.org)
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.yahoo.com *.msn.com *.adform.net *.hyj.mobi *.netrk.net *.yimg.com *.googletagmanager.com *.googleapis.com *.google-analytics.com *.facebook.net *.criteo.net *.criteo.com *.googleadservices.com *.mbww.com *.bing.com *.fndsda.net *.doubleclick.net *.cloudflare.com *.google.com *.googlesyndication.com *.go-mpulse.net *.windows.net *.jquery.com *.cookielaw.org data:; object-src *; style-src 'self' 'unsafe-inline' *.yahoo.com *.criteo.net *.criteo.com *.msn.com *.adform.net *.hyj.mobi *.netrk.net *.yimg.com *.googletagmanager.com *.googleapis.com *.google-analytics.com *.facebook.net *.googleadservices.com *.mbww.com *.bing.com *.fndsda.net *.doubleclick.net *.cloudflare.com *.google.com *.windows.net *.jquery.com; img-src * data:; media-src *; frame-src *; child-src *; font-src * data:; connect-src *; report-uri /report-csp-violation
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=1000; includeSubDomains
From-Origin: same
X-Drupal-Cache: HIT
Last-Modified: Thu, 26 Nov 2020 07:20:22 GMT
ETag: "1606375222"
Date: Thu, 26 Nov 2020 16:43:15 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: 978d33b8da4ce9affdb944e0fe9ac5f4=6d02d205bb786e7331de02667e4743e5; path=/; HttpOnly; Secure
x-encoded-content-encoding: gzip
x-encoded-content-length: 11153