Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Content-Type: text/html; charset=utf-8 Set-Cookie: ASP.NET_SessionId=ii10nzisegyd1fo303qvcumg; path=/; secure; HttpOnly X-Frame-Options: SameOrigin HTTP/1.1 200 OK Content-Length: 14232 X-Content-Type-Options: nosniff X-UA-Compatible: IE=edge Date: Sun, 22 Oct 2017 15:10:09 GMT Referrer-Policy: origin-when-cross-origin Content-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.aspnetcdn.com stats.g.doubleclick.net www.google-analytics.com ssl.google-analytics.com www.googletagmanager.com www.googleadservices.com maps.googleapis.com www.youtube.com s.ytimg.com supertext.bamboohr.com https://localhost:44399 https://c.leadlab.click;object-src 'self';style-src 'self' 'unsafe-inline' cloud.webtype.com supertext.bamboohr.com fonts.googleapis.com;img-src 'self' www.supertext.ch pls.webtype.com www.google.com www.google.ch stats.g.doubleclick.net ssl.google-analytics.com www.google-analytics.com www.googleadservices.com https://googleads.g.doubleclick.net csi.gstatic.com maps.googleapis.com maps.gstatic.com www.bamboohr.com data:;media-src 'self';frame-src 'self' www.youtube.com docs.google.com;font-src 'self' cloud.webtype.com fonts.gstatic.com themes.googleusercontent.com;connect-src 'self' supertext.bamboohr.com https://groupshare.supertext.com:4430 https://grsh-srvr-test.northeurope.cloudapp.azure.com:4430 https://localhost:44399;base-uri 'self';child-src 'self' blob: child.object.com;form-action 'self';frame-ancestors 'self';report-uri /WebResource.axd?cspReport=true Cache-Control: private