Content-Language: de
Server: Apache
Content-Security-Policy: default-src 'self' *.geoportal.nrw *.nrw.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.geoportal.nrw *.nrw.de *.google.com *.twimg.com platform.twitter.com *.googleapis.com *.bootstrapcdn.com; style-src 'self' 'unsafe-inline' *.geoportal.nrw *.nrw.de *.twitter.com *.google.com *.twimg.com platform.twitter.com *.googleapis.com *.bootstrapcdn.com; font-src 'self' data: *; img-src 'self' data: blob: *; frame-src 'self' data: blob: *.geoportal.nrw *.nrw.de *.facebook.com *.facebook.de *.twitter.com *.google.com services.bgr.de; child-src 'self' *.geoportal.nrw *.nrw.de *.facebook.com *.facebook.de *.twitter.com *.google.com; frame-ancestors 'self' *.geoportal.nrw *.nrw.de *.facebook.com *.facebook.de *.twitter.com *.google.com; object-src 'self'; media-src *.googleapis.com *.bootstrapcdn.com *.geoportal.nrw *.nrw.de;
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Content-Security-Policy: default-src 'self' *.geoportal.nrw *.nrw.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' geoportal.nrw *.geoportal.nrw *.nrw.de *.google.com *.twimg.com platform.twitter.com *.googleapis.com *.bootstrapcdn.com; style-src 'self' 'unsafe-inline' geoportal.nrw *.geoportal.nrw *.nrw.de *.twitter.com *.google.com *.twimg.com platform.twitter.com *.googleapis.com *.bootstrapcdn.com; font-src 'self' data: *; img-src 'self' data: blob: *; frame-src 'self' data: blob: geoportal.nrw *.geoportal.nrw *.nrw.de *.facebook.com *.facebook.de *.twitter.com *.google.com services.bgr.de; child-src 'self' geoportal.nrw *.geoportal.nrw *.nrw.de *.facebook.com *.facebook.de *.twitter.com *.google.com; frame-ancestors 'self' geoportal.nrw *.geoportal.nrw *.nrw.de *.facebook.com *.facebook.de *.twitter.com *.google.com; object-src 'self'; media-src *.googleapis.com *.bootstrapcdn.com geoportal.nrw *.geoportal.nrw *.nrw.de;
Date: Fri, 30 Jun 2017 14:55:27 GMT
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Fri, 30 Jun 2017 14:03:55 GMT
Content-Type: text/html; charset=utf-8
Etag: "1498831435-0"
Content-Length: 42944
X-Content-Type-Options: nosniff
Cache-Control: public, max-age=0
X-Permitted-Cross-Domain-Policies: master-only
Vary: Cookie,Accept-Encoding