Server: Apache
Content-Security-Policy: default-src 'self' https://sr.sbdb.dk/ https://dc.sbdb.dk/; script-src 'self' 'unsafe-inline' https://sr.sbdb.dk/ https://dc.sbdb.dk/ https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com 'sha256-sMvseVQ4nGW+QOCAmk1mdhNoNEbB+NkltCJ5G6dp+fQ=' 'nonce-5BVYpp5fDi16ARNZugrSBQhGeF' https://cdn.ampproject.org https://connect.facebook.net 'sha256-U1oGGGppq4X3KVhA1AKNRIi95b+mRk0dnNbon/yYbxk=' https://maps.googleapis.com https://www.gstatic.com; style-src https://sr.sbdb.dk/ https://dc.sbdb.dk/ https://fonts.googleapis.com 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://sr.sbdb.dk/ https://dc.sbdb.dk/ data: https://www.google-analytics.com https://stats.g.doubleclick.net https://amp-error-reporting.appspot.com https://www.facebook.com https://csi.gstatic.com https://maps.gstatic.com; font-src 'self' https://sr.sbdb.dk/ https://fonts.gstatic.com; object-src 'none'; media-src 'none'; child-src https://googletagmanager.com https://www.googletagmanager.com https://staticxx.facebook.com https://www.google.com; frame-ancestors 'none'; report-uri https://9a8c5a98bfd7107fbad137afea627cca.report-uri.io/r/default/csp/enforce;
X-Xss-Protection: 1; mode=block
Transfer-Encoding: chunked
Cache-Control: no-store, no-cache, must-revalidate
Vary: Accept-Encoding
Expires: Thu, 19 Nov 1981 08:52:00 GMT
HTTP/1.1 200 OK
Set-Cookie: sb_settings=1538598941.0; expires=Wed, 03-Oct-2018 20:35:41 GMT; Max-Age=31536000; path=/; domain=.spisbilligt.dk; secure
Date: Tue, 03 Oct 2017 20:35:41 GMT
Access-Control-Allow-Credentials: true
Pragma: no-cache
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Type: text/html; charset=UTF-8
X-Frame-Options: DENY
Set-Cookie: ci_session=94a466rqvh4iuoql1i5hetfaj5qggt56; expires=Tue, 03-Oct-2017 22:35:41 GMT; Max-Age=7200; path=/; domain=.spisbilligt.dk; secure; HttpOnly