Sandnesgarn.de

retry-after: 0
location: https://www.sandnesgarn.de/
accept-ranges: bytes
date: Wed, 06 Nov 2024 00:55:05 GMT
x-served-by: cache-lga21955-LGA
x-cache: HIT
x-cache-hits: 0
x-timer: S1730854505.266067,VS0,VE2
vary: 
strict-transport-security: max-age=31557600
content-length: 0

HTTP/2 200 
content-security-policy: font-src *.klarnacdn.net *.fontawesome.com *.gstatic.com data: script.hotjar.com 'self' data: data: 'self' 'unsafe-inline'; form-action *.facebook.com 'self'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.klarna.com big.g.doubleclick.net vars.hotjar.com optimize.google.com *.facebook.com *.doubleclick.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.google.com *.google.no *.google.se *.google.fi *.google.ro *.google.pl *.google.dk *.gstatic.com *.google-analytics.com *.googleadservices.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.hsforms.net *.hsforms.com 'self' data: blob: *.facebook.com *.fastly.net *.google.lt *.google.de *.google.co.uk *.googleapis.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com *.klarna.com *.klarnacdn.net *.klarnaservices.com https://storage.googleapis.com/ https://api.mapbox.com/ *.google.com *.gstatic.com *.google-analytics.com *.googleanalytics.com *.googleadservices.com *.googleoptimize.com *.doubleclick.net static.hotjar.com script.hotjar.io *.hsforms.net *.hsforms.com cdn.jsdelivr.net js-agent.newrelic.com *.zdassets.com *.hotjar.com *.facebook.net *.googleapis.com *.googletagmanager.com rawcdn.githack.com *.zopim.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src downloads.mailchimp.com *.klarnacdn.net *.fontawesome.com *.gstatic.com *.googleapis.com *.google.com *.sandnes-garn.be *.sandnesgarn.no cloud.typography.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src data: *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com https://storage.googleapis.com/ https://api.mapbox.com/ https://events.mapbox.com/ *.google-analytics.com *.doubleclick.net *.hotjar.com vc.hotjar.io surveystats.hotjar.io wss://*.hotjar.com *.google.com *.googleapis.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.zdassets.com *.zendesk.com wss://widget-mediator.zopim.com *.googlesyndication.com *.hotjar.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://eng.vdc.dev/csp-report; report-to report-endpoint;
content-type: text/html; charset=UTF-8
expires: Wed, 06 Nov 2024 12:01:59 GMT
pragma: cache
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https://eng.vdc.dev/csp-report"}]}
traceresponse: 00-180510d072cfae73776c6e8a0061c3af-3203ba2a17a61472-01
x-content-type-options: nosniff
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-esi: 1
x-frame-options: SAMEORIGIN
x-platform-server: i-0f70022298b11e7e1
x-platform-server: i-0f70022298b11e7e1
x-xss-protection: 1; mode=block
accept-ranges: none
age: 46386
date: Wed, 06 Nov 2024 00:55:05 GMT
x-served-by: cache-lhr-egll1980036-LHR, cache-lga21926-LGA
x-cache: HIT, MISS
x-cache-hits: 55, 0
cache-control: no-store, no-cache, must-revalidate, max-age=0
vary: Accept-Encoding,Cookie
strict-transport-security: max-age=31557600
content-encoding: br