Rosa.be

date: Tue, 25 Apr 2023 20:50:04 GMT
content-security-policy-report-only: report-to default;connect-src 'self' https://prod-api.rosa.be analytics-mp.rosa.be  https://builder.io https://cdn.builder.io https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://stats.g.doubleclick.net https://www.google-analytics.com https://bam.eu01.nr-data.net;script-src-attr 'unsafe-inline';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://js-agent.newrelic.com https://bam.eu01.nr-data.net https://region1.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.be/ads https://stats.g.doubleclick.net https://script.hotjar.com https://static.hotjar.com https://connect.facebook.net;font-src 'unsafe-inline' https://script.hotjar.com https://fonts.gstatic.com;style-src 'self' https://static.hotjar.com https://script.hotjar.com https://fonts.googleapis.com/ 'unsafe-inline';frame-src https://*.hotjar.com;img-src 'self' data: *.rosa.be https://cdn.builder.io https://s3.eu-central-1.amazonaws.com www.googletagmanager.com https://www.google-analytics.com https://www.google.be/ https://www.google.com/ mt0.google.com mt1.google.com mt2.google.com mt3.google.com https://static.hotjar.com https://script.hotjar.com;iframe-ancestor 'none';default-src 'self';base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';upgrade-insecure-requests
cross-origin-embedder-policy: credentialless
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
report-to: {"group":"wizard","max_age":10886400,"endpoints":[{"url":"https://rosa.report-uri.com/a/d/g/wizard"}],"include_subdomains":true},{"group":"default","max_age":10886400,"endpoints":[{"url":"https://rosa.report-uri.com/a/d/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":31536000,"include_subdomains":true, "failure_fraction":0.01}
cache-control: no-store
location: /en/
x-cache: Miss from cloudfront
via: 1.1 e404a2eabfdbde8f3eb87125622c56ca.cloudfront.net (CloudFront)
x-amz-cf-pop: YUL62-C1
x-amz-cf-id: 9dXfsowkXjZNDFxF_HMPobotnga7-5wdGCE3aaejiXyzPgBfaLnjeA==

HTTP/2 200 
content-type: text/html; charset=utf-8
date: Tue, 25 Apr 2023 20:50:04 GMT
content-security-policy-report-only: report-to default ;connect-src 'self' analytics-mp.rosa.be prod-hospital-api.rosa.be prod-api.rosa.be cognito-idp.eu-central-1.amazonaws.com builder.io cdn.builder.io *.hotjar.com *.hotjar.io wss://*.hotjar.com stats.g.doubleclick.net *.google.com *.google-analytics.com maps.googleapis.com www.google-analytics.com bam.eu01.nr-data.net ;script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.builder.io js-agent.newrelic.com bam.eu01.nr-data.net cdn.builder.io maps.googleapis.com www.googleadservices.com *.google-analytics.com www.googletagmanager.com www.google.be/ads stats.g.doubleclick.net *.hotjar.com connect.facebook.net ;font-src 'unsafe-inline' 'self' script.hotjar.com fonts.gstatic.com ;style-src 'self' static.hotjar.com script.hotjar.com fonts.googleapis.com/ 'unsafe-inline' ;frame-src *.hotjar.com www.facebook.com td.doubleclick.net ;img-src 'self' data: avatars.rosa.be mt0.google.com mt1.google.com mt2.google.com mt3.google.com maps.googleapis.com *.gstatic.com cdn.builder.io s3.eu-central-1.amazonaws.com *.googletagmanager.com googleads.g.doubleclick.net *.google-analytics.com *.google.be *.google.com static.hotjar.com script.hotjar.com www.facebook.com ;default-src 'self' ;base-uri 'self' ;form-action 'self' www.facebook.com ;frame-ancestors 'none' ;object-src 'none' ;script-src-attr 'unsafe-inline'
cross-origin-embedder-policy: credentialless; report-to="default"
cross-origin-opener-policy: unsafe-none; report-to="default"
cross-origin-resource-policy: same-origin
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
report-to: {"group":"wizard","max_age":10886400,"endpoints":[{"url":"https://rosa.report-uri.com/r/t/csp/wizard"}],"include_subdomains":true},{"group":"default","max_age":10886400,"endpoints":[{"url":"https://rosa.report-uri.com/a/t/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":31536000,"include_subdomains":true, "failure_fraction":0.01}
cache-control: public, max-age=300, s-maxage=60
set-cookie: rosa_language=en; Domain=.rosa.be; Max-Age=31536000; Path=/; SameSite=None; Secure
vary: Accept-Encoding
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 e404a2eabfdbde8f3eb87125622c56ca.cloudfront.net (CloudFront)
x-amz-cf-pop: YUL62-C1
x-amz-cf-id: d9NNPwEx7OxkIyBAINFrJsUfnEyNVu9xgTZKS8u4wCKZT2I1RjfmNQ==