Content-Length: 47860 Content-Security-Policy: default-src 'self';frame-ancestors 'self'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.pingdom.net *.abtasty.com *.veinteractive.com www.nordicchoicehotels.com *.twitter.com *.google.com extads.net m.addthisedge.com m.addthis.com s7.addthis.com assets.juicer.io www.google-analytics.com www.googletagmanager.com tagmanager.google.com res.cloudinary.com *.cloudfront.net *.facebook.com connect.facebook.net track.adform.net *.fls.doubleclick.net nowinteract-nowinteractnordi.netdna-ssl.com *.easyresearch.se *.zendesk.com *.zopim.com wss://*.zopim.com *.zopim.io; connect-src 'self' wss://*.coop.se:* wss://*.kf.local:* *.pingdom.net *.veinteractive.com *.abtasty.com ve1appseventssb.servicebus.windows.net apil1.spinnaker-js.com m.addthis.com s7.addthis.com www.juicer.io *.108proxy.se *.54proxy.se www.google-analytics.com www.googletagmanager.com tagmanager.google.com *.zendesk.com *.zopim.com wss://*.zopim.com *.zopim.io; style-src 'self' 'unsafe-inline' *.abtasty.com *.pingdom.net *.veinteractive.com assets.juicer.io tagmanager.google.com fonts.googleapis.com *.easyresearch.se *.zendesk.com *.zopim.com wss://*.zopim.com *.zopim.io; img-src 'self' data: *.pingdom.net *.zendesk.com *.abtasty.com www.gstatic.com api.hitta.se scontent.cdninstagram.com www.google.com www.google.se *.google-analytics.com *.googletagmanager.com tagmanager.google.com ssl.gstatic.com res.cloudinary.com *.cloudfront.net *.facebook.com stats.g.doubleclick.net track.adform.net *.fls.doubleclick.net *.easyresearch.se *.zendesk.com *.zopim.com wss://*.zopim.com *.zopim.io; font-src 'self' data: assets.juicer.io fonts.gstatic.com tagmanager.google.com *.zendesk.com *.zopim.com wss://*.zopim.com *.zopim.io; frame-src 'self' *.veinteractive.com accounts.google.com www.flysas.com app.ecoonline.com www.nordicchoicehotels.com recruit.visma.com www.recruit.visma.com www.aditrorecruit.com *.twitter.com www.youtube.com *.facebook.com c1.adform.net s7.addthis.com track.adform.net *.fls.doubleclick.net *.easyresearch.se *.abtasty.com *.zendesk.com *.zopim.com wss://*.zopim.com *.zopim.io; base-uri 'self' *.coop.se *.kf.local *.zopim.com wss://*.zopim.com *.zopim.io; report-uri https://coop.report-uri.io/r/default/csp/enforce *.zopim.com wss://*.zopim.com *.zopim.io X-Content-Type-Options: nosniff Set-Cookie: ASP.NET_SessionId=ejkclu3f51takvccczagkngv; path=/; secure; HttpOnly Date: Sat, 01 Jul 2017 13:35:46 GMT X-Content-Security-Policy: default-src 'self';frame-ancestors 'self'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.pingdom.net *.abtasty.com *.veinteractive.com www.nordicchoicehotels.com *.twitter.com *.google.com extads.net m.addthisedge.com m.addthis.com s7.addthis.com assets.juicer.io www.google-analytics.com www.googletagmanager.com tagmanager.google.com res.cloudinary.com *.cloudfront.net *.facebook.com connect.facebook.net track.adform.net *.fls.doubleclick.net nowinteract-nowinteractnordi.netdna-ssl.com *.easyresearch.se *.zendesk.com *.zopim.com wss://*.zopim.com *.zopim.io; connect-src 'self' wss://*.coop.se:* wss://*.kf.local:* *.pingdom.net *.veinteractive.com *.abtasty.com ve1appseventssb.servicebus.windows.net apil1.spinnaker-js.com m.addthis.com s7.addthis.com www.juicer.io *.108proxy.se *.54proxy.se www.google-analytics.com www.googletagmanager.com tagmanager.google.com *.zendesk.com *.zopim.com wss://*.zopim.com *.zopim.io; style-src 'self' 'unsafe-inline' *.abtasty.com *.pingdom.net *.veinteractive.com assets.juicer.io tagmanager.google.com fonts.googleapis.com *.easyresearch.se *.zendesk.com *.zopim.com wss://*.zopim.com *.zopim.io; img-src 'self' data: *.pingdom.net *.zendesk.com *.abtasty.com www.gstatic.com api.hitta.se scontent.cdninstagram.com www.google.com www.google.se *.google-analytics.com *.googletagmanager.com tagmanager.google.com ssl.gstatic.com res.cloudinary.com *.cloudfront.net *.facebook.com stats.g.doubleclick.net track.adform.net *.fls.doubleclick.net *.easyresearch.se *.zendesk.com *.zopim.com wss://*.zopim.com *.zopim.io; font-src 'self' data: assets.juicer.io fonts.gstatic.com tagmanager.google.com *.zendesk.com *.zopim.com wss://*.zopim.com *.zopim.io; frame-src 'self' *.veinteractive.com accounts.google.com www.flysas.com app.ecoonline.com www.nordicchoicehotels.com recruit.visma.com www.recruit.visma.com www.aditrorecruit.com *.twitter.com www.youtube.com *.facebook.com c1.adform.net s7.addthis.com track.adform.net *.fls.doubleclick.net *.easyresearch.se *.abtasty.com *.zendesk.com *.zopim.com wss://*.zopim.com *.zopim.io; base-uri 'self' *.coop.se *.kf.local *.zopim.com wss://*.zopim.com *.zopim.io; report-uri https://coop.report-uri.io/r/default/csp/enforce *.zopim.com wss://*.zopim.com *.zopim.io Content-Type: text/html; charset=utf-8 X-Server-Name: 7 HTTP/1.1 200 OK X-Frame-Options: SAMEORIGIN Public-Key-Pins: pin-sha256="SomvKp+ZKFiTBn/6RM+JGTQZddOpITnNOVL8a8l7uw8="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; includeSubDomains; max-age=15778463; report-uri="https://coop.report-uri.io/r/default/hpkp/enforce" Public-Key-Pins-Report-Only: pin-sha256="SomvKp+ZKFiTBn/6RM+JGTQZddOpITnNOVL8a8l7uw8="; pin-sha256="SomvKp+ZKFiTBn/6RM+JGTQZddOpITnNOVL8a8l7uw8="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; includeSubDomains; max-age=1; report-uri="https://coop.report-uri.io/r/default/hpkp/reportOnly" Cache-Control: private Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Expires: Fri, 30 Jun 2017 13:35:45 GMT X-Xss-Protection: 1; mode=block