Toare.ch

server: nginx
date: Tue, 24 Mar 2026 14:57:14 GMT
content-type: text/html; charset=UTF-8
content-length: 48417
last-modified: Mon, 23 Mar 2026 09:23:41 GMT
cache-control: max-age=0
expires: Tue, 24 Mar 2026 14:57:14 GMT
vary: Accept-Encoding
content-encoding: gzip
content-security-policy: default-src 'self'; frame-ancestors 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.google.com https://maps.googleapis.com https://*.gstatic.com https://platform.linkedin.com https://cdn.jsdelivr.net; img-src 'self' *.toare.ch https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com data: https://s.w.org https://ps.w.org https://developer.wordpress.org https://secure.gravatar.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.googleapis.com *.google.com https://*.gstatic.com data: blob:; frame-src 'self' https://www.google.com https://maps.google.com; upgrade-insecure-requests;
referrer-policy: strict-origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-robots-tag: none
x-xss-protection: 1; mode=block
permissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 1728000
cross-origin-embedder-policy: same-origin
cross-origin-opener-policy: same-origin