Gmos.ch

Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: en-US
Content-Length: 0
Date: Fri, 22 Sep 2023 13:27:05 GMT
Expires: 0
Location: https://ostschweiz.migros.ch/de.html
Pragma: no-cache
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Vcap-Request-Id: 6aa6670e-6a5f-4d35-5c80-957aab9a634a
X-Xss-Protection: 0
Set-Cookie: BIGipServerpool_redirect.migros.ch=!ksKwTDw75ByQvHlhODwq8iMqlgU5cSAwxHrIa4atyDBt+tGojLgoOtAogioOnlT+lHVcsmHgA3VtpA==; path=/; Secure
X-Pool: /Common/pool_redirect.migros.ch

HTTP/1.1 200 OK
vary: Origin, Accept-Encoding
Access-Control-Allow-Credentials: true
Set-Cookie: JSESSIONID=CDB0A479A502871E5E57332C5B3F2A85; Path=/; Secure; HttpOnly; SameSite=Lax
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Fri, 22 Sep 2023 13:27:05 GMT
Content-Type: text/html;charset=UTF-8
Content-Language: de
Date: Fri, 22 Sep 2023 13:27:07 GMT
X-Cache-Ttl: 0.000
Content-Encoding: gzip
Age: 0
Via: 1.1 varnish (Varnish/6.0)
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy:  report-to csp-violations-endpoint ; report-uri https://reports.migros.ch/spaces/koe31g/violations ; default-src * 'unsafe-inline' 'unsafe-eval' ; frame-src * ; frame-ancestors * ; script-src * 'unsafe-inline' 'unsafe-eval' ; base-uri * 'unsafe-inline' 'unsafe-eval' ; style-src * 'unsafe-inline' ; connect-src * 'unsafe-inline' ; object-src 'self' ; font-src * data: ; img-src * data: blob: 'unsafe-inline' 'unsafe-eval' ; manifest-src * ; media-src 'self' ; worker-src 'self' blob: https://chat140.realperson.de ; child-src * ; 
Content-Security-Policy-Report-Only:  report-to csp-reporting-endpoint ; report-uri https://reports.migros.ch/spaces/koe31g/reports ; default-src 'self' ; frame-src 'self' https://*.migros.ch https://chat140.realperson.de https://*.doubleclick.net https://vars.hotjar.com https://www.facebook.com https://www.youtube.com https://www.google.com https://player.captivate.fm https://static-raetsel.ateleris.com https://chat140.realperson.de https://e.issuu.com https://www.googletagmanager.com ; frame-ancestors 'self' https://*.migros.ch ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://*.migros.ch https://chat140.realperson.de https://www.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://static.hotjar.com https://script.hotjar.com https://connect.facebook.net https://*.doubleclick.net https://bat.bing.com https://code.jquery.com https://www.youtube.com https://www.google.com https://www.gstatic.com https://*.qualtrics.com https://www.cincopa.com https://rtcdn.cincopa.com https://static-raetsel.ateleris.com https://restaurant.migrosaare.ch https://cdn.cookielaw.org ; base-uri 'self' ; style-src 'self' 'unsafe-inline' https://chat140.realperson.de https://fast.fonts.net https://rtcdn.cincopa.com https://fonts.googleapis.com https://static-raetsel.ateleris.com https://restaurant.migrosaare.ch ; connect-src 'self' https://geolocation.onetrust.com https://cdn.cookielaw.org https://*.migros.ch https://chat140.realperson.de https://*.doubleclick.net https://europe-west6-viseca-cumulus-karte.cloudfunctions.net https://www.google.ch https://www.google.com https://www.google.fr https://www.google.de https://www.google.it https://www.google.at https://www.google.li https://*.analytics.google.com https://analytics.google.com https://*.google-analytics.com https://adservice.google.com https://in.hotjar.com https://viseca-cumulus-karte.oa.r.appspot.com https://bat.bing.com https://*.run.app https://www.facebook.com https://*.qualtrics.com https://rtcdn.cincopa.com https://analytics.cincopa.com https://maps.googleapis.com https://chat.viseca.ch https://api.raetsel.ateleris.com https://static-raetsel.ateleris.com https://restaurant.migrosaare.ch ; object-src 'self' ; font-src 'self' data: https://cdn.migros.ch https://fonts.gstatic.com https://rtcdn.cincopa.com https://chat140.realperson.de https://static-raetsel.ateleris.com ; img-src 'self' 'unsafe-eval' data: https://*.doubleclick.net https://cdn.cookielaw.org https://*.migros.ch https://*.rokka.io https://chat140.realperson.de https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://www.google.ch https://www.google.fr https://www.google.de https://www.google.it https://www.google.at https://www.google.li https://bat.bing.com https://www.google.com https://i.ytimg.com https://img.youtube.com https://play.google.com https://*.apple.com https://mediacdn.cincopa.com https://rtcdn.cincopa.com https://maps.googleapis.com https://maps.gstatic.com https://play-lh.googleusercontent.com https://fra1.qualtrics.com https://static-raetsel.ateleris.com https://restaurant.migrosaare.ch ; manifest-src 'self' ; media-src 'self' ; worker-src 'self' blob: https://chat140.realperson.de ; child-src https://chat140.realperson.de ; 
Report-To: { "group":"csp-reporting-endpoint", "max_age":604800, "endpoints": [ { "url": "https://reports.migros.ch/spaces/koe31g/reports" } ] } ,{ "group":"csp-violations-endpoint", "max_age":604800, "endpoints": [ { "url": "https://reports.migros.ch/spaces/koe31g/violations" } ] }
Reporting-Endpoints: csp-reporting-endpoint="https://reports.migros.ch/spaces/koe31g/reports", csp-violations-endpoint="https://reports.migros.ch/spaces/koe31g/violations" 
X-Cache: MISS
X-Node: suapp027
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: BIGipServerpool_shared_migros.ch_80=!K8zWyiN84ZZbEKJhODwq8iMqlgU5cfTtxnoisyK8Qt+x1cnnyzSlM4rBSZvhqLjhrnZO4sEPsxlfrXc=; path=/; Secure