Martinuscollege.nl summary

Referrer-Policy: same-origin Transfer-Encoding: chunked Expect-CT: max-age=0;report-uri="https://martinuscollege.report-uri.io/r/default/ct/reportOnly" Set-Cookie: c2aebcf6fe752ff7cb743a67cf022940=4j0p7s2hu6je5uu1gbcg5q6hh4; path=/; secure; HttpOnly;Secure X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Date: Sat, 01 Jul 2017 17:50:10 GMT HTTP/1.1 200 OK Server: Apache Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 X-Content-Type-Options: nosniff P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" Public-Key-Pins-Report-Only: max-age=2592000;pin-sha256="j2dkfvzGY/mkSppQ5dMVb9UeSDV/qRU1XVpKZ4lE9N4=";pin-sha256="QlO8yigTS+jxG0lK6unqZAVw/4FUqSx4/bSB4//kM+0=";report-uri=https://martinuscollege.report-uri.io/r/default/hpkp/reportOnly X-Xss-Protection: 1; mode=block Content-Type: text/html; charset=utf-8 Last-Modified: Sat, 01 Jul 2017 17:50:10 GMT Strict-Transport-Security: max-age=63072000 Pragma: no-cache Expires: Wed, 17 Aug 2005 00:00:00 GMT Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.google-analytics.com www.googletagmanager.com www.googleadservices.com cse.google.com www.googleapis.com connect.facebook.net; style-src 'self' 'unsafe-inline' www.google.com; img-src 'self' www.google.nl www.google.fr www.google.de *.google.com *.gstatic.com www.googleapis.com www.google-analytics.com *.doubleclick.net www.facebook.com; font-src 'self'; object-src 'self' www.youtube.com; child-src 'self' cse.google.com www.google.com accounts.google.com www.googletagmanager.com calendar.google.com maps.google.com www.youtube.com *.doubleclick.net school.meesterbaan.nl *.facebook.com; frame-src 'self' cse.google.com www.google.com accounts.google.com www.googletagmanager.com calendar.google.com maps.google.com www.youtube.com *.doubleclick.net school.meesterbaan.nl *.facebook.com; form-action 'self'; report-uri https://martinuscollege.report-uri.io/r/default/csp/enforce;