| date: |
Fri, 04 Oct 2024 21:40:19 GMT |
| content-type: |
text/html; charset=utf-8 |
| content-length: |
50725 |
| connection: |
close |
| cache-control: |
no-cache, no-store |
| pragma: |
no-cache |
| set-cookie: |
.AspNetCore.Antiforgery.qoo-dYBtBeg=CfDJ8BTpxF7ioBlFjbQYXB6Z2chyH-kRY0Lh3UcaSMIWVK0FevxkwgXEse9xaamkl36PX4zo1iJ960tiyRIBd-F0H_0jC5NWEfyIA4yb1cSxYjcZYp_PZNcydY8QDycFopHurLVnFfZ1vHj1u5miIIIFJwo; path=/; secure; samesite=strict; httponly |
| strict-transport-security: |
max-age=31536000 |
| x-frame-options: |
SAMEORIGIN |
| x-xss-protection: |
1; mode=block |
| x-content-type-options: |
nosniff |
| x-download-options: |
noopen |
| referrer-policy: |
strict-origin-when-cross-origin |
| x-permitted-cross-domain-policies: |
none |
| permissions-policy: |
accelerometer=*, autoplay=*, camera=*, cross-origin-isolated=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, magnetometer=*, microphone=*, midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=*, screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=self, clipboard-read=*, clipboard-write=* |
| content-security-policy: |
connect-src 'self' *.icordis.be *.lcp.be burgerprofiel.vlaanderen.be wss://authenticatie.vlaanderen.be wss://prod.widgets.burgerprofiel.vlaanderen.be https://prod.widgets.burgerprofiel.vlaanderen.be wss://prod.contactapi.uat-vlaanderen.be https://prod.contactapi.uat-vlaanderen.be https://contactapi.vlaanderen.be *.burgerprofiel.be geoserver.gis.cloud.mow.vlaanderen.be api.gipod.vlaanderen.be geo.api.vlaanderen.be *.vrijwilligerswerk.be *.algolianet.com *.algolia.net vrijwilligerswerk.be *.facebook.com *.facebook.net *.enviso.io *.adyen.com *.timeblockr.com *.api.timeblockr.cloud *.google-analytics.com *.googletagmanager.com stats.g.doubleclick.net *.analytics.google.com *.readspeaker.com *.giveaday.be https://apps.ticketmatic.com toegankelijk.vlaanderen.be *.googleapis.com *.topdesk.net *.hcaptcha.com *.matomo.cloud https://geoserver.gis.cloud.mow.vlaanderen.be *.agconsult.com *.hotjar.com; font-src 'self' *.icordis.be *.lcp.be https://ui.vlaanderen.be https://dij151upo6vad.cloudfront.net *.gstatic.com *.vrijwilligerswerk.be vrijwilligerswerk.be *.widget.enviso.io *.enviso.io *.timeblockr.com *.api.timeblockr.cloud *.readspeaker.com data: https://fonts.googleapis.com https://fonts.gstatic.com https://kit-pro.fontawesome.com https://apps.ticketmatic.com *.typekit.net https://fonts.gstatic.com *.googleapis.com *.topdesk.net; frame-src 'self' *.icordis.be *.lcp.be notfound-static.fwebservices.be stratenplan.dehaan.be *.iamfas.belgium.be https://prod.widgets.burgerprofiel.vlaanderen.be https://prod.frontend.burgerprofiel.vlaanderen.be https://authenticatie.vlaanderen.be https://idp.iamfas.belgium.be https://www.openstreetmap.org https://umap.openstreetmap.fr *.youtube.com youtu.be www.youtube.com *.soundcloud.com *.vimeo.com *.vrijwilligerswerk.be *.algolianet.com vrijwilligerswerk.be *.algolia.net *.facebook.com *.facebook.net *.gift2give.be *.issuu.com maps.geopunt.be *.maps.geopunt.be *.api.vlaanderen.be *.vlaanderen.be *.geopunt.be *.bizlocator.be *.spotto.be *.spotify.com *.jobsolutions.be *.3p.eu *.widget.enviso.io *.enviso.io *.adyen.com *.timeblockr.com *.api.timeblockr.cloud *.arcg.is arcg.is *.maps.arcgis.com *.arcgis.com *.google.com https://calendar.google.com https://maps.eco-movement.com/ www3.sport.vlaanderen forms.office.com https://www.recycleapp.be *.tableau.com *.microsoftstream.com https://360-tour.be https://www.360-tour.be *.topdesk.net *.instagram.com https://player.clevercast.com *.hcaptcha.com https://indd.adobe.com *.feratel.com feratel.com https://docs.google.com; img-src 'self' *.icordis.be *.lcp.be data: *.amazonaws.com https://prod.widgets.burgerprofiel.vlaanderen.be https://prod.widgetconfigservice.burgerprofiel.vlaanderen.be data: *.osm.be *.informatievlaanderen.be *.geopunt.be *.tile.openstreetmap.org https://geo.api.vlaanderen.be geoserver.gis.cloud.mow.vlaanderen.be api.gipod.vlaanderen.be *.tile.openstreetmap.fr *.gstatic.com *.ytimg.com *.google.com *.soundcloud.com *.vimeo.com *.vimeocdn.com *.vrijwilligerswerk.be vrijwilligerswerk.be *.algolia.net https://scontent-iad3-1.xx.fbcdn.net *.fbsbx.com *.facebook.com *.facebook.net *.gift2give.be *.issuu.com cdn.syndication.twimg.com *.jobsolutions.be *.3p.eu *.widget.enviso.io *.enviso.io *.adyen.com *.timeblockr.com *.api.timeblockr.cloud *.google-analytics.com *.googletagmanager.com *.google.be *.uitdatabank.be udb-media.imgix.net udb2-media.imgix.net images-prod-uitdatabank.imgix.net *.westtoer.be *.west-vlaanderen.be *.cloudfront.net *.giveaday.be openfed.github.io https://apps.ticketmatic.com toegankelijk.vlaanderen.be https://openfed.github.io *.tableau.com *.googleapis.com *.topdesk.net *.instagram.com *.cdninstagram.com https://squizlabs.github.io *.smassets.net *.matomo.cloud https://geoserver.gis.cloud.mow.vlaanderen.be; script-src 'self' 'unsafe-inline' *.icordis.be *.lcp.be 'unsafe-eval' https://prod.widgets.burgerprofiel.vlaanderen.be *.vlaanderen.be *.geopunt.be *.youtube.com *.vrijwilligerswerk.be *.algolianet.com vrijwilligerswerk.be *.algolia.net *.facebook.com *.facebook.net *.twitter.com *.twimg.com *.vlaanderen.be *.jobsolutions.be *.3p.eu *.widget.enviso.io *.enviso.io *.adyen.com *.timeblockr.com *.api.timeblockr.cloud *.google-analytics.com *.googletagmanager.com *.arcg.is arcg.is *.maps.arcgis.com *.arcgis.com *.readspeaker.com https://geo.api.vlaanderen.be *.giveaday.be openfed.github.io https://apps.ticketmatic.com toegankelijk.vlaanderen.be https://openfed.github.io *.tableau.com *.googleapis.com *.topdesk.net *.instagram.com *.hcaptcha.com https://squizlabs.github.io *.surveymonkey.com *.googleapis.com cdn.matomo.cloud *.vlaanderen.be *.agconsult.com *.hotjar.com; worker-src 'self' www.dehaan.be *.icordis.be *.lcp.be https://prod.widgets.burgerprofiel.vlaanderen.be *.soundcloud.com *.enviso.io *.adyen.com *.api.timeblockr.cloud https://apps.ticketmatic.com *.topdesk.net; frame-ancestors 'self' https://stats.lcp.be *.enviso.io *.adyen.com https://stats.lcp.be *.topdesk.net *.feratel.com; style-src 'self' 'unsafe-inline' *.icordis.be *.lcp.be www.dehaan.be fonts.googleapis.com *.vrijwilligerswerk.be vrijwilligerswerk.be *.algolia.net cdn.syndication.twimg.com *.twitter.com *.widget.enviso.io *.enviso.io *.timeblockr.com *.api.timeblockr.cloud *.readspeaker.com *.giveaday.be *.googleapis.com https://kit-pro.fontawesome.com fonts.googleapis.com openfed.github.io toegankelijk.vlaanderen.be *.typekit.net https://openfed.github.io *.googleapis.com *.topdesk.net https://squizlabs.github.io; object-src *.api.timeblockr.cloud; report-uri /report-csp-violation |
|
