P20.ch Summary

Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Date: Wed, 09 Dec 2020 08:09:44 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15724800; includeSubdomains;
Referrer-Policy: origin-when-cross-origin
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' *.onewp.net ;   style-src 'unsafe-inline' 'self' data: *.google.com *.facebook.com *.enalyzer.com *.adform.net *.facebook.net *.northfork.se *.elfsight.com *.hotjar.com *.hotjar.io *.onewp.net *.google.com *.googleapis.com use.typekit.net p.typekit.net *.clickdimensions.com *.msecnd.net *.vo.msecnd.net *.azureedge.net *.svc.dynamics.com;   font-src 'self' *.google.com *.google.se  *.facebook.com *.enalyzer.com *.adform.net *.facebook.net fonts.gstatic.com data: *.northfork.se *.hotjar.com *.hotjar.io *.elfsight.com *.onewp.net *.prod.onewp.net *.staging.onewp.net use.typekit.net *.clickdimensions.com *.msecnd.net *.vo.msecnd.net *.azureedge.net *.svc.dynamics.com;   script-src 'self' *.google.com *.google.se *.facebook.com *.enalyzer.com *.adform.net *.facebook.net *.northfork.se *.elfsight.com *.onewp.net *.hotjar.com *.hotjar.io *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.google.com use.typekit.net sc-static.net *.sc-static.net *.clickdimensions.com *.msecnd.net *.vo.msecnd.net *.azureedge.net *.svc.dynamics.com *.papaya.no 'unsafe-inline' 'unsafe-eval' blob:;   connect-src 'self' *.google.com *.google.se *.facebook.com *.enalyzer.com *.adform.net *.facebook.net *.northfork.se *.elfsight.com *.onewp.net *.hotjar.com *.hotjar.io *.googleadservices.com *.google-analytics.com yoast.com performance.typekit.net oocd-api.azurewebsites.net *.azureedge.net *.svc.dynamics.com;   worker-src 'self' blob: ;   child-src 'self' blob: ;   img-src 'self' data: *.google.com *.google.se *.facebook.com *.adform.net *.facebook.net *.northfork.se *.elfsight.com *.hotjar.com *.hotjar.io *.cdninstagram.com *.onewp.net *.google-analytics.com *.gstatic.com *.doubleclick.net secure.gravatar.com s.w.org p.typekit.net *.clickdimensions.com *.msecnd.net *.vo.msecnd.net *.azureedge.net *.svc.dynamics.com;   frame-src 'self' *
Link: ; rel="https://api.w.org/"
Link: ; rel=shortlink
X-XSS-Protection: 1; mode=block
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 a875698e08bcdc7b13c04786dfe3a1ad.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HEL50-C2
X-Amz-Cf-Id: 8NEpB7hBkBdYn3CcPT2V2Sgrs-casZecr_X2HjBC6LHfLChzBlsfQw==
x-encoded-content-encoding: gzip
x-encoded-content-length: 6686