Content-Length: 285035
Content-language: de
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' *.nrw.de *.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.jwplatform.com *.flickr.com *.staticflickr.com ; style-src 'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com; font-src *; img-src data: *; frame-ancestors 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com; child-src 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org; object-src 'self'; connect-src 'self' *.nrw.de; media-src *;
Content-Type: text/html; charset=UTF-8
Cache-Control: must-revalidate, no-cache, private
Strict-Transport-Security: max-age=31536000; preload
X-Permitted-Cross-Domain-Policies: master-only
Date: Mon, 16 Oct 2017 12:11:57 GMT
Server: Apache
X-Drupal-Dynamic-Cache: UNCACHEABLE
Vary: Accept-Encoding
X-Content-Security-Policy: default-src 'self' *.nrw.de *.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.jwplatform.com *.flickr.com *.staticflickr.com ; style-src 'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com; font-src *; img-src data: *; frame-ancestors 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com; child-src 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org; object-src 'self'; connect-src 'self' *.nrw.de; media-src *;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
HTTP/1.1 200 OK
X-UA-Compatible: IE=edge
X-Frame-Options: SAMEORIGIN