HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 23:18:07 GMT
Server: Apache
Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: ; img-src 'self' data: secure.gravatar.com www.gravatar.com; report-uri https://bob-transfer.de?gdsih-csp-report;
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Expect-CT: max-age=7776000, enforce
Access-Control-Allow-Origin: null
Access-Control-Allow-Methods: GET,PUT,POST,DELETE
Access-Control-Allow-Headers: Content-Type, Authorization
X-Content-Security-Policy: default-src 'self'; img-src *; media-src * data:;
X-Content-Type-Options: nosniff
Content-Security-Policy: report-uri https://bob-transfer.de
Referrer-Policy: no-referrer-when-downgrade
Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="default"
Cross-Origin-Embedder-Policy: unsafe-none; report-to="default"
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="default"
Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="default"
Cross-Origin-Resource-Policy: cross-origin
X-Frame-Options: ALLOWALL
Permissions-Policy: geolocation=(self), microphone=(), accelerometer=(), gyroscope=(), magnetometer=()
Feature-Policy: display-capture 'self'
X-Permitted-Cross-Domain-Policies: none
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Link: <https://bob-transfer.de/wp-json/>; rel="https://api.w.org/", <https://bob-transfer.de/wp-json/wp/v2/pages/127>; rel="alternate"; type="application/json", <https://bob-transfer.de/>; rel=shortlink
Set-Cookie: PHPSESSID=7e474f84e2ebd61bf44114e82d9c6906; path=/; secure; HttpOnly
Upgrade: h2,h2c
Connection: Upgrade
Vary: Accept-Encoding,User-Agent
Access-Control-Allow-Origin: null
Access-Control-Allow-Methods: GET,PUT,POST,DELETE
Access-Control-Allow-Headers: Content-Type, Authorization
X-Content-Security-Policy: img-src *; media-src * data:;
Cross-Origin-Embedder-Policy-Report-Only: unsafe-none; report-to="default"
Cross-Origin-Embedder-Policy: unsafe-none; report-to="default"
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="default"
Cross-Origin-Opener-Policy: same-origin; report-to="default"
Cross-Origin-Resource-Policy: cross-origin
strict-dynamic: https: 'self'; default-src 'self'
X-Powered-By: bob-transfer.de
X-Permitted-Cross-Domain-Policies: none
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8