X-UA-Compatible: IE=edge Date: Thu, 15 Jun 2017 12:25:04 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 Set-Cookie: session-id=1f3d5671-b002-47f9-9202-c3f45fe397e4; path=/; domain=www.connox.ch; secure; HttpOnly Cache-Control: no-store, no-cache, must-revalidate Vary: Accept-Encoding Server: Apache HTTP/1.1 200 OK X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://*.zopim.com https://*.criteo.net https://*.criteo.com https://bat.bing.com https://connect.facebook.net https://tracker.twenga.co.uk https://code.jquery.com https://cdn.ravenjs.com; style-src 'self' 'unsafe-inline' https://www.google.com https://fonts.googleapis.com; img-src * 'self' data:; media-src 'self' https://v2.zopim.com; font-src 'self' data: https://*.zopim.com https://fonts.gstatic.com https://applesocial.s3.amazonaws.com https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://ajax.googleapis.com https://*.zopim.com wss://*.zopim.com https://app.getsentry.com; object-src 'self' https://www.connox.de https://www.connox.com; frame-src 'self' https://*.g.doubleclick.net https://www.google.de https://www.google.com https://*.criteo.com https://www.googleadservices.com https://www.youtube.com; report-uri https://sentry.io/api/155925/csp-report/?sentry_key=e7b2e4e5849f4f1f8db00dfa3b1c77be Expires: Thu, 19 Nov 1981 08:52:00 GMT X-Content-Type-Options: nosniff Set-Cookie: x-ref=bcf75195-4edf-4641-9c18-9897c4362924; expires=Wed, 11-Mar-2020 12:25:04 GMT; Max-Age=86400000; path=/; domain=www.connox.ch; secure; HttpOnly Transfer-Encoding: chunked X-Frame-Options: sameorigin Content-Type: text/html; charset=UTF-8