| date: |
Mon, 07 Oct 2024 13:09:56 GMT |
| content-type: |
text/html; charset=utf-8 |
| content-length: |
49119 |
| connection: |
close |
| cache-control: |
no-cache, no-store |
| pragma: |
no-cache |
| set-cookie: |
.AspNetCore.Antiforgery.qoo-dYBtBeg=CfDJ8BTpxF7ioBlFjbQYXB6Z2cjBeL4M9TEZw4P4IG5kggzmLyn-FQdhmX4DORDHZkJyh9BIsSev-NJimbzegmpmhQzq-7qoK1H7VjIQ-qhKgSe6SG5RMFH4o0tmc4RHE-sa0wGIsUgjvAlu3eZig-S2N9s; path=/; secure; samesite=strict; httponly |
| strict-transport-security: |
max-age=31536000 |
| x-frame-options: |
SAMEORIGIN |
| x-xss-protection: |
1; mode=block |
| x-content-type-options: |
nosniff |
| x-download-options: |
noopen |
| referrer-policy: |
strict-origin-when-cross-origin |
| x-permitted-cross-domain-policies: |
none |
| permissions-policy: |
accelerometer=*, autoplay=*, camera=*, cross-origin-isolated=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, magnetometer=*, microphone=*, midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=*, screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=self, clipboard-read=*, clipboard-write=* |
| content-security-policy: |
connect-src 'self' *.icordis.be *.lcp.be burgerprofiel.vlaanderen.be wss://authenticatie.vlaanderen.be wss://prod.widgets.burgerprofiel.vlaanderen.be https://prod.widgets.burgerprofiel.vlaanderen.be wss://prod.contactapi.uat-vlaanderen.be https://prod.contactapi.uat-vlaanderen.be https://contactapi.vlaanderen.be *.burgerprofiel.be geoserver.gis.cloud.mow.vlaanderen.be api.gipod.vlaanderen.be geo.api.vlaanderen.be *.vrijwilligerswerk.be *.algolianet.com *.algolia.net vrijwilligerswerk.be *.facebook.com *.facebook.net *.enviso.io *.adyen.com *.timeblockr.com *.api.timeblockr.cloud *.google-analytics.com *.googletagmanager.com stats.g.doubleclick.net *.analytics.google.com *.giveaday.be toegankelijk.vlaanderen.be *.googleapis.com *.topdesk.net *.hcaptcha.com *.matomo.cloud https://geoserver.gis.cloud.mow.vlaanderen.be *.ecwid.com https://ecomm.events/register; font-src 'self' *.icordis.be *.lcp.be https://ui.vlaanderen.be https://dij151upo6vad.cloudfront.net *.gstatic.com *.vrijwilligerswerk.be vrijwilligerswerk.be *.widget.enviso.io *.enviso.io *.timeblockr.com *.api.timeblockr.cloud https://fonts.googleapis.com https://fonts.gstatic.com https://kit-pro.fontawesome.com *.typekit.net https://fonts.gstatic.com *.googleapis.com *.topdesk.net *.cloudfront.net *.shopsettings.com; frame-src 'self' *.icordis.be *.lcp.be notfound-static.fwebservices.be *.iamfas.belgium.be https://prod.widgets.burgerprofiel.vlaanderen.be https://prod.frontend.burgerprofiel.vlaanderen.be https://authenticatie.vlaanderen.be https://idp.iamfas.belgium.be https://www.openstreetmap.org https://umap.openstreetmap.fr *.youtube.com youtu.be www.youtube.com *.soundcloud.com *.vimeo.com *.vrijwilligerswerk.be *.algolianet.com vrijwilligerswerk.be *.algolia.net *.facebook.com *.facebook.net *.gift2give.be *.issuu.com maps.geopunt.be *.maps.geopunt.be *.api.vlaanderen.be *.vlaanderen.be *.geopunt.be *.bizlocator.be *.spotto.be *.jobsolutions.be *.3p.eu *.widget.enviso.io *.enviso.io *.adyen.com *.timeblockr.com *.api.timeblockr.cloud *.arcg.is arcg.is *.maps.arcgis.com *.arcgis.com *.google.com https://calendar.google.com www3.sport.vlaanderen https://www.recycleapp.be *.topdesk.net *.instagram.com *.hcaptcha.com https://docs.google.com *.meetingburger.net https://heyzine.com; img-src 'self' *.icordis.be *.lcp.be data: *.amazonaws.com https://prod.widgets.burgerprofiel.vlaanderen.be https://prod.widgetconfigservice.burgerprofiel.vlaanderen.be data: *.osm.be *.informatievlaanderen.be *.geopunt.be *.tile.openstreetmap.org https://geo.api.vlaanderen.be geoserver.gis.cloud.mow.vlaanderen.be api.gipod.vlaanderen.be *.tile.openstreetmap.fr *.gstatic.com *.ytimg.com *.google.com *.soundcloud.com *.vimeo.com *.vimeocdn.com *.vrijwilligerswerk.be vrijwilligerswerk.be *.algolia.net https://scontent-iad3-1.xx.fbcdn.net *.fbsbx.com *.facebook.com *.facebook.net *.gift2give.be *.issuu.com cdn.syndication.twimg.com *.jobsolutions.be *.3p.eu *.widget.enviso.io *.enviso.io *.adyen.com *.timeblockr.com *.api.timeblockr.cloud *.google-analytics.com *.googletagmanager.com *.google.be *.uitdatabank.be udb-media.imgix.net udb2-media.imgix.net images-prod-uitdatabank.imgix.net *.westtoer.be *.west-vlaanderen.be *.cloudfront.net *.giveaday.be openfed.github.io toegankelijk.vlaanderen.be https://openfed.github.io *.googleapis.com *.topdesk.net *.instagram.com *.cdninstagram.com https://squizlabs.github.io *.matomo.cloud https://geoserver.gis.cloud.mow.vlaanderen.be *.cloudfront.net; script-src 'self' 'unsafe-inline' *.icordis.be *.lcp.be 'unsafe-eval' https://prod.widgets.burgerprofiel.vlaanderen.be *.vlaanderen.be *.geopunt.be *.youtube.com *.vrijwilligerswerk.be *.algolianet.com vrijwilligerswerk.be *.algolia.net *.facebook.com *.facebook.net *.twitter.com *.twimg.com *.vlaanderen.be *.jobsolutions.be *.3p.eu *.widget.enviso.io *.enviso.io *.adyen.com *.timeblockr.com *.api.timeblockr.cloud *.google-analytics.com *.googletagmanager.com *.arcg.is arcg.is *.maps.arcgis.com *.arcgis.com https://geo.api.vlaanderen.be *.giveaday.be openfed.github.io toegankelijk.vlaanderen.be https://openfed.github.io *.googleapis.com *.topdesk.net *.instagram.com *.hcaptcha.com https://squizlabs.github.io cdn.matomo.cloud *.vlaanderen.be 'unsafe-eval' *.ecwid.com *.cloudfront.net https://ecomm.events/i.js https://hcaptcha.com; worker-src 'self' www.bornem.be *.icordis.be *.lcp.be https://prod.widgets.burgerprofiel.vlaanderen.be *.soundcloud.com *.enviso.io *.adyen.com *.api.timeblockr.cloud *.topdesk.net; frame-ancestors 'self' https://stats.lcp.be *.enviso.io *.adyen.com https://stats.lcp.be *.topdesk.net; style-src 'self' 'unsafe-inline' *.icordis.be *.lcp.be www.bornem.be fonts.googleapis.com *.vrijwilligerswerk.be vrijwilligerswerk.be *.algolia.net cdn.syndication.twimg.com *.twitter.com *.widget.enviso.io *.enviso.io *.timeblockr.com *.api.timeblockr.cloud *.giveaday.be *.googleapis.com https://kit-pro.fontawesome.com fonts.googleapis.com openfed.github.io toegankelijk.vlaanderen.be *.typekit.net https://openfed.github.io *.googleapis.com *.topdesk.net https://squizlabs.github.io *.cloudfront.net; object-src *.api.timeblockr.cloud; report-uri /report-csp-violation |
|
