Strict-Transport-Security: max-age=300 X-Permitted-Cross-Domain-Policies: none X-Frame-Options: DENY Transfer-Encoding: chunked Date: Wed, 06 Dec 2017 11:12:07 GMT Set-Cookie: _izportal=SkdoU1RwVXNSRll6UHBQeVZQbWt6bExjK2NXNGErdjYvUWpDRklqbmtSSzFJTEFMUXRDVklMQk9zTG1SM1F4YXVVdHpiUEFwYUpJUHA4R25FcDlUU3JjVGo5QStxdHpLSFFOVHFZelRERTJVZjZIU1BPZW1PMHk0TDJtdFYvSWRjYkp6Q1hnZ0U1eS9ZT0xXbk9jZmx6OWlpWnZRaDZnYjl1U3N6S3RFM1UydnMvRm1SbVoveGZ3cGZrZ1lLWGtLLS1QL3lBbms1dGdkbzE0bWM4cllzN09RPT0%3D--1721f78f7ccaee5d6add51b0139407caded82c7c; domain=izettle.com; path=/; secure; HttpOnly; SameSite=Lax X-Xss-Protection: 1; mode=block HTTP/1.1 200 OK Server: Cowboy X-Download-Options: noopen Via: 1.1 vegur Referrer-Policy: origin-when-cross-origin Etag: W/"cc610ebc6e3f4b1230670c81ae5a951d" Connection: keep-alive X-Request-Id: 056c3cfd-2fc1-447b-91ef-110176201245 Cache-Control: max-age=0, private, must-revalidate X-Content-Type-Options: nosniff Content-Type: text/html; charset=utf-8 X-Runtime: 0.127515 Content-Security-Policy: default-src 'self' 'unsafe-inline' *.doubleclick.net *.google-analytics.com *.googletagmanager.com *.hotjar.com *.izettle.com *.izettle.net *.izettlepay.com *.izettletest.com *.izettletest.net *.linkedin.com *.olark.com *.optimizely.com *.tvsquared.com api.sandbox.braintreegateway.com bat.bing.com cdn.ravenjs.com connect.facebook.net dwsve44av2psn.cloudfront.net izettle.go2cloud.org izettletwo.regily.com js.braintreegateway.com maps.googleapis.com secure.adnxs.com sjs.bizographics.com snap.licdn.com static.criteo.net www.facebook.com www.google.co.uk www.google.com.br www.google.com www.google.de www.google.dk www.google.es www.google.fi www.google.fr www.google.it www.google.nl www.google.no www.google.pt www.google.se www.googleadservices.com www.instantor.com www.instantor.net www.instantor.se wss://*.izettle.com wss://*.izettletest.com; img-src 'self' data: *.google-analytics.com *.izettle.com *.izettletest.com bat.bing.com checkout.paypal.com googleads.g.doubleclick.net imgix.ttcdn.co stats.g.doubleclick.net www.facebook.com www.google.com www.google.se www.paypalobjects.com; script-src 'self' 'unsafe-inline' *.doubleclick.net *.google-analytics.com *.googletagmanager.com *.hotjar.com *.izettle.com *.izettle.net *.izettlepay.com *.izettletest.com *.izettletest.net *.linkedin.com *.olark.com *.optimizely.com *.tvsquared.com api.sandbox.braintreegateway.com bat.bing.com cdn.ravenjs.com connect.facebook.net dwsve44av2psn.cloudfront.net izettle.go2cloud.org izettletwo.regily.com js.braintreegateway.com maps.googleapis.com secure.adnxs.com sjs.bizographics.com snap.licdn.com static.criteo.net www.facebook.com www.google.co.uk www.google.com.br www.google.com www.google.de www.google.dk www.google.es www.google.fi www.google.fr www.google.it www.google.nl www.google.no www.google.pt www.google.se www.googleadservices.com www.instantor.com www.instantor.net www.instantor.se wss://*.izettle.com wss://*.izettletest.com; report-uri https://izettle.report-uri.com/r/d/csp/enforce