Strict-Transport-Security: max-age=16070400; includeSubDomains X-Permitted-Cross-Domain-Policies: master-only Content-Length: 162160 X-Frame-Options: DENY Cache-Control: no-cache X-XSS-Protection: 1; mode=block Date: Sat, 07 Oct 2017 07:30:14 GMT X-Content-Type-Options: NOSNIFF Set-Cookie: RealSociedad=pyobibgegvc5m3x5sqe4bif1; path=/; HttpOnly Pragma: no-cache X-AspNetMvc-Version: 5.2 HTTP/1.1 200 OK Expires: -1 Content-Type: text/html; charset=utf-8 Content-Security-Policy: connect-src 'self' https://www.google-analytics.com *.google-analytics.com; default-src *.realsociedad.com *.realsociedad.eus 'self'; style-src 'self' 'unsafe-inline' *.googleapis.com; img-src 'self' http://placehold.it https://cdn.realsociedad.eus https://cdntienda.realsociedad.com http://twemoji.maxcdn.com https://pbs.twimg.com *.cdninstagram.com *.fbcdn.net www.google-analytics.com https://img.youtube.com *.azureedge.net *.google-analytics.com https://cdn.realsociedad.com data: https://maps.googleapis.com *.gstatic.com; media-src 'self' https://cdn.realsociedad.eus https://cdntienda.realsociedad.com http://twemoji.maxcdn.com https://pbs.twimg.com *.cdninstagram.com *.fbcdn.net www.google-analytics.com https://img.youtube.com *.twimg.com; font-src 'self' *.gstatic.com; script-src 'self' 'unsafe-inline' https://www.realsociedad.com https://www.realsociedad.eus https://www.googletagmanager.com http://www.google-analytics.com https://ssl.google-analytics.com 'unsafe-eval' https://www.youtube.com *.ytimg.com https://maps.googleapis.com; object-src https://www.realsociedad.eus; frame-src *.realsociedad.com https://www.youtube.com *.powerbi.com;