X-Content-Type-Options: nosniff Date: Wed, 24 May 2017 18:50:35 GMT X-Frame-Options: SameOrigin Content-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.sitecore.net https://*.google.com https://*.gstatic.com *.google-analytics.com https://js-agent.newrelic.com https://bam.nr-data.net *.googleapis.com https://*.edialog24.com https://*.edialog24.no https://edialog24.no https://connect.facebook.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://secure.adnxs.com http://ib.adnxs.com https://*.mookie1.com https://www.googletagmanager.com;style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css https://hello.myfonts.net/count/2637c7 https://fonts.googleapis.com https://*.edialog24.no https://tagmanager.google.com;img-src 'self' * data:;frame-src 'self' https://*.google.com *.youtube.com *.vimeo.com *.morningstar.com *.portalbank.no http://*.sitecore.net https://*.doubleclick.net https://www.google.se https://www.google.no http://fls.doubleclick.net http://ad.doubleclick.net https://www.googletagmanager.com;font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com;connect-src 'self' http://*.sitecore.net;report-uri /WebResource.axd?cspReport=true Strict-Transport-Security: max-age=31536000; includeSubDomains X-XSS-Protection: 1; mode=block Content-Length: 37839 Content-Type: text/html; charset=utf-8 Connection: close Set-Cookie: SC_ANALYTICS_GLOBAL_COOKIE=2fd6d91b778d4c90bd0bf10a1abde4b2|False; expires=Mon, 24-May-2027 18:50:35 GMT; path=/; HttpOnly HTTP/1.1 200 OK Cache-Control: private Set-Cookie: ASP.NET_SessionId=1inld2ksswa3k43xgpr2kc1v; path=/; HttpOnly X-Download-Options: noopen