Link: <https://www.nts.eu/wp-json/>; rel="https://api.w.org/", <https://www.nts.eu/>; rel=shortlink X-Content-Type-Options: nosniff Date: Sat, 17 Feb 2018 11:00:47 GMT HTTP/1.1 200 OK X-XSS-Protection: 1; mode=block Vary: X-Forwarded-Proto,Accept-Encoding Pragma: no-cache Set-Cookie: PHPSESSID=14cd9107e98fa6bad595996ff93970e4; path=/; secure; HttpOnly X-Frame-Options: SAMEORIGIN Content-Type: text/html; charset=UTF-8 X-Pingback: https://www.nts.eu/xmlrpc.php Cache-Control: no-store, no-cache, must-revalidate Expect-CT: max-age=0, report-uri="https://ntseu.report-uri.com/r/d/ct/reportOnly Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Content-Security-Policy: default-src 'self' yoast.com; script-src 'self' *.googletagmanager.com cdn.polyfill.io fl-cdn.scdn1.secure.raxcdn.com embed-cdn.flockler.com flockler.com static.flockler.com maxcdn.bootstrapcdn.com 'unsafe-inline' 'unsafe-eval' maps.googleapis.com *.google-analytics.com ajax.googleapis.com; style-src 'self' flockler.com static.flockler.com fonts.googleapis.com maxcdn.bootstrapcdn.com 'unsafe-inline'; font-src 'self' data: fonts.googleapis.com maxcdn.bootstrapcdn.com fonts.gstatic.com; img-src 'self' data: http: https: *.gravatar.com; child-src 'self' https://www.youtube.com https://youtube.com https://scontent.cdninstagram.com; form-action 'self'; object-src 'self'; report-uri https://ntseu.report-uri.com/r/d/csp/enforce Referrer-Policy: same-origin Transfer-Encoding: chunked