Set-Cookie: LB-Persistence-Cookie-ServiceGroup_HTTPS_www-prod-hirslanden-ch=BEAKAAAK; Path=/
Server: web server
Content-Security-Policy: default-src 'none'; object-src 'self'; media-src blob: https://*.wistia.com https://*.readspeaker.com https://tagboard.com https://*.tagboard.com; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.puls-berufe.ch https://*.google.com https://*.sprechzimmer.ch https://*.wistia.com https://fast.wistia.net https://src.litix.io https://s.ytimg.com https://www.youtube.com https://tagboard.com https://*.tagboard.com https://s7.addthis.com https://m.addthis.com https://m.addthisedge.com https://www.googletagmanager.com https://maps.googleapis.com https://www.google-analytics.com https://connect.facebook.net https://platform.twitter.com https://cdn.syndication.twimg.com https://csi.gstatic.com; connect-src 'self' https://blog.hirslanden.ch https://*.wistia.com https://*.litix.io https://*.akamaihd.net https://www.google-analytics.com https://s7.addthis.com https://m.addthis.com https://*.tagboard.com https://tagboard.com; img-src * 'self' data:; style-src 'self' 'unsafe-inline' https://cloud.typography.com https://*.sprechzimmer.ch https://platform.twitter.com https://www-prod.hirslanden.ch https://*.tagboard.com https://tagboard.com; frame-src 'self' https://www.google.com https://fast.wistia.com https://s7.addthis.com https://*.readspeaker.com https://*.tagboard.com https://tagboard.com https://www.youtube.com https://*.sprechzimmer.ch https://www.med-congress.ch https://*.datahouse.ch/ https://*.detailnet.ch https://www2.hirslanden.ch https://vr.zaak.ch https://platform.twitter.com https://staticxx.facebook.com https://www.facebook.com https://tourmake.it; child-src 'self' blob: https://staticxx.facebook.com https://fast.wistia.com https://s7.addthis.com https://platform.twitter.com https://*.readspeaker.com https://*.tagboard.com https://tagboard.com
Accept-Ranges: bytes
Content-Length: 55267
ETag: "a11b8ee97ab2d31:0"
Content-Type: text/html
X-Content-Type-Options: nosniff
HTTP/1.1 200 OK
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=2592000
Referrer-Policy: origin-when-cross-origin
Cache-Control: public, must-revalidate, max-age=60
Date: Sat, 03 Mar 2018 05:41:48 GMT
Last-Modified: Fri, 02 Mar 2018 23:05:09 GMT
X-XSS-Protection: 1; mode=block