X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 style-src 'self' 'unsafe-inline' fonts.googleapis.com *.twitter.com www.gstatic.com d1azc1qln24ryf.cloudfront.net cloud.typography.com *.twimg.com ; X-XSS-Protection: 1; mode=block Date: Mon, 30 Oct 2017 17:29:52 GMT Set-Cookie: SC_ANALYTICS_GLOBAL_COOKIE=75db01a614c5453c8eb3fa35ed7e2609|False; expires=Thu, 28-Oct-2027 17:29:52 GMT; path=/; secure; HttpOnly Expires: -1 Cache-Control: no-cache, no-store connect-src 'self' dl.edge-cdn.net *.twitter.com ; Pragma: no-cache Set-Cookie: LastShownItemId=; path=/; secure default-src 'none' ; report-uri MagReport.csp?cspReport=true Content-Security-Policy: object-src 'self' ; Set-Cookie: ASP.NET_SessionId=vqnlo2cf5cpt25tcus3vjgpn; path=/; secure; HttpOnly Content-Length: 52684 frame-src 'self' www.youtube.com qfx.tools.investis.com player.admiralcloud.com *.twitter.com www.google.com dev.dieproduktion.de ; HTTP/1.1 200 OK img-src 'self' csi.gstatic.com dl.edge-cdn.net data: maps.googleapis.com maps.gstatic.com *.twimg.com *.twitter.com webtrends.metro.info ssl.siteimprove.com www.gstatic.com app.miag.com maintenance.metroag.de ; Connection: close media-src 'self' jpn.videos.metrosystems.net edge-cdn.net ; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com d1azc1qln24ryf.cloudfront.net ; Set-Cookie: advertisingde#lang=de-DE; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure X-Content-Type-Options: nosniff Server: Metro Group Content-Type: text/html; charset=utf-8 script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com maps.googleapis.com www.youtube.com s.ytimg.com code.highcharts.com edge-cdn.net dl.videos.metrosystems.net *.twimg.com *.twitter.com webtrends.metro.info ssl.siteimprove.com www.gstatic.com dl.edge-cdn.net ;