X-Content-Type-Options: nosniff X-Cluster: default Server: nginx Date: Sun, 04 Mar 2018 08:18:19 GMT HTTP/1.1 200 OK Content-Length: 51793 X-Ua-Compatible: IE=edge Content-Language: de X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Accept-Ranges: bytes Content-Type: text/html;charset=utf-8 X-Varnish: 2554728 Age: 0 Content-Security-Policy: default-src 'self' https://www.youtube.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data:; img-src 'self' https://www.paypalobjects.com https://tkr.ade25.de data:; style-src 'self' 'unsafe-inline' https://embedsocial.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://asset1.betterplace.org https://embedsocial.com https://tkr.ade25.de https://ajax.googleapis.com; child-src 'self' https://www.betterplace.org https://piwik.ade25.de https://www.ammado.com https://embedsocial.com https://maps.google.de https://www.youtube.com https://w.soundcloud.com https://player.vimeo.com https://www.google.com https://content.jwplatform.com https://videos-f.jwpsrv.com X-XSS-Protection: 1; mode=block Connection: keep-alive Via: 1.1 varnish-v4 X-Frame-Options: SAMEORIGIN grace: none Expires: Sat, 1 Jan 2000 00:00:00 GMT X-Varnish-Age: 0 X-Varnish-Action: FETCH (override - backend not setting cache control)