HTTP/1.1 200 OK
Server: nginx
Date: Sat, 25 May 2019 13:56:26 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 83031
Connection: keep-alive
Vary: Accept-Encoding
X-Flow-Powered: Flow/5.2 Neos/4.2
Referrer-Policy: same-origin
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Content-Security-Policy: default-src 'self' ; connect-src https://www.google-analytics.com https://www.facebook.com/tr/ 'self' https://*.cornelsen.de ; font-src 'self' https://*.cornelsen.de ; frame-src https://www.googletagmanager.com/ns.html 'self' https://*.cornelsen.de https://www.google.com/recaptcha/ https://www.youtube.com https://w.soundcloud.com https://docs.google.com/gview ; img-src https://www.google-analytics.com https://www.facebook.com https://www.econda-monitor.de https://monitor.econda-monitor.de 'self' https://*.cornelsen.de data: ; object-src 'none' ; script-src https://www.googletagmanager.com https://www.google-analytics.com https://monitor.econda-monitor.de 'self' https://*.cornelsen.de 'unsafe-eval' data: https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ ; style-src 'self' https://*.cornelsen.de 'unsafe-inline' ; base-uri 'self' ; form-action 'self' ; frame-ancestors 'self' ; report-uri /__csp-report ;
X-fastcgi-cache: HIT
X-host: www1