Skanva.no

date: Sat, 16 Sep 2023 15:25:32 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/8.1.22
set-cookie: X-Magento-Vary=7b3ad0137a8426f2684a831fb3375a9b39727899; expires=Sat, 16-Sep-2023 16:25:32 GMT; Max-Age=3600; path=/; secure; HttpOnly; SameSite=Lax
content-security-policy: base-uri https://skanva.no/;
content-security-policy: upgrade-insecure-requests;
content-security-policy: object-src https://vinduesgrossisten.dk/ http://skanvafenster.de/ https://skanvafonster.se/ https://skanva.no/ https://skanva.is/
x-magento-cache-control: max-age=86400, public, s-maxage=86400
x-magento-cache-debug: MISS
x-magento-tags: cat_c,cat_c_447,cat_c_492,cat_c_529,cat_c_538,store,cms_b,cms_b_campaign_promotion_logo,cms_b_delivery_info,cms_b_emarket_icon,cms_b_header-trustpilot-dk,cms_b_header-top-first-block-is-de,cms_b_header-top-second-block-is-de,cms_b_pricematch,cms_b_video-meeting-no,cms_b_second-menu,cms_b_dk-footer,cms_b_de-footer,cms_b_is-footer,cms_b_no-footer,cms_b_se-footer,cms_p_554,cms_b_378,cms_b_promo_vinduer_category_no,cms_b_398,cms_b_promo_terrassedore_category_no,cms_b_379,cms_b_promo_dore_category_no,cms_b_397,cms_b_promo_skydedore_category_no,cms_b_377,cms_b_no_usp_list,cms_b_376,cms_b_trustpilot_widget,cms_b_460,cms_b_instagram-feed-1,cms_b_,FPC
pragma: no-cache
cache-control: max-age=0, must-revalidate, no-cache, no-store
expires: Fri, 16 Sep 2022 15:25:32 GMT
x-magento-deploy-mode: production
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https://csp-reports.vinduesgrossisten.dk/"}]}
content-security-policy-report-only: font-src *.fontawesome.com https://widgets.trustedshops.com https://integrations.etrusted.com fonts.gstatic.com fonts.googleapis.com script.hotjar.com sleeknotestaticcontent.sleeknote.com *.klarnacdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com calendly.com cookieinformation.com widget.trustpilot.com vars.hotjar.com secure.livechatinc.com consent.cookiebot.com policy.app.cookieinformation.com www.googletagmanager.com *.doubleclick.net *.pinterest.com *.klarna.com pricetag.viabill.com event-client.viabill.com klarna-payments-eu.playground.klarna.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://widgets.trustedshops.com https://integrations.etrusted.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ merit.soliditet.dk *.doubleclick.net *.google.com *.google.by *.google.pl *.google.dk *.google.no *.google.is *.google.se www.gstatic.com cookieinformation.com bat.bing.com c.bing.com *.cdninstagram.com coi-prod.azureedge.net *.tryggehandel.no *.google-analytics.com *.analytics.google.com *.pinterest.com *.vinduesgrossisten.dk vinduesgrossisten.dk *.inspectlet.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com sparxpres.dk *.klarna.com *.klarnaevt.com *.klarnacdn.net sleeknote.com *.sleeknote.com *.snapengage.com x.klarnacdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com assets.calendly.com cookieinformation.com widget.emaerket.dk assets.emaerket.dk https://widgets.trustedshops.com https://integrations.etrusted.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ widget.trustpilot.com www.gstatic.com www.google.com *.google-analytics.com *.analytics.google.com static.cloudflareinsights.com js-agent.newrelic.com bam.eu01.nr-data.net *.hotjar.com *.livechatinc.com consent.cookiebot.com ajax.cloudflare.com policy.app.cookieinformation.com bat.bing.com *.doubleclick.net *.tryggehandel.no *.googleadservices.com *.pinimg.com *.inspectlet.com *.vo.msecnd.net chimpstatic.com downloads.mailchimp.com *.list-manage.com sparxpres.dk https://static.klaviyo.com/onsite/js/ https://static-tracking.klaviyo.com/onsite/js/ api.reaktion.com *.klarna.com *.klarnacdn.net *.sleeknote.com *.snapengage.com storage.googleapis.com pricetag.viabill.com *.klarnaservices.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com calendly.com assets.calendly.com *.fontawesome.com https://widgets.trustedshops.com https://integrations.etrusted.com https://static.klaviyo.com fonts.gstatic.com fonts.googleapis.com cdn-images.mailchimp.com downloads.mailchimp.com *.klaviyo.com *.klarnacdn.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com cdn.livechatinc.com vinduesgrossisten.dk skanva.no skanva.is sleeknote.com *.snapengage.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com calendly.com cookieinformation.com assets.emaerket.dk *.trustedshops.com *.etrusted.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ widget.trustpilot.com bam.eu01.nr-data.net in.hotjar.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.doubleclick.net graph.instagram.com bat.bing.com api.livechatinc.com policy.app.cookieinformation.com consent.app.cookieinformation.com *.googlesyndication.com *.google.com *.google.by *.google.dk *.google.de *.google.is *.google.no google.com google.by google.dk google.de google.is google.no *.pinterest.com *.google-analytics.com *.analytics.google.com *.cloudfunctions.net *.sleeknote.com fonts.googleapis.com *.inspectlet.com wss://ws.inspectlet.com *.vo.msecnd.net *.raptorsmartadvisor.com sparxpres.dk *.klaviyo.com static-forms.klaviyo.com api.reaktion.com *.klarnaevt.com sleeknote.com *.snapengage.com eu.playground.klarnaevt.com *.klarnacdn.net *.klarna.com dawa.aws.dk api.bring.com *.klarnaservices.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reports.vinduesgrossisten.dk/; report-to report-endpoint;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-request-time: 0.645
x-request-id: b4c9903ae1c851ce80ccd3f21bf08866
strict-transport-security: max-age=31556926; includeSubDomains; preload
referrer-policy: same-origin
x-ua-compatible: IE=Edge,chrome=1
link: <https://skanva.no/>; rel="canonical"
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 807a1f618db75c93-ORD
content-encoding: br