| cache-control: |
no-cache |
| pragma: |
no-cache |
| content-type: |
text/html; charset=utf-8 |
| expires: |
-1 |
| content-security-policy: |
default-src 'self'; script-src *.googleapis.com *.gstatic.com www.google.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js *.acv-csc.be *.acvcsc.be *.hetacv.be *.lacsc.be *.diecsc.be *.dmz-web.acv-csc.intranet https://chat.smartcall.cc https://cdnjs.cloudflare.com *.google-analytics.com *.analytics.google.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.cloudflare.com *.jquery.com kendo.cdn.telerik.com *.hotjar.com ws://*.hotjar.com surfly.com *.googletagmanager.com https://*.talkjs.com https://unpkg.com 'self' web-chat.nativechat.com https://cdn.insight.sitefinity.com https://dec.azureedge.net 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com *.acv-csc.be *.acvcsc.be *.hetacv.be *.lacsc.be *.diecsc.be *.smartcall.cc *.googletagmanager.com 'self' web-chat.nativechat.com https://cdn.insight.sitefinity.com https://dec.azureedge.net 'unsafe-inline'; img-src *.gstatic.com *.googleapis.com platform.tumblr.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com i.ytimg.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: *.acv-csc.be *.acvcsc.be *.hetacv.be *.lacsc.be *.diecsc.be *.dmz-web.acv-csc.intranet *.swagger.io *.googletagmanager.com *.google-analytics.com *.analytics.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.eloqua.com track.hubspot.com *.google.com *.google.be *.google.co.uk *.google.de *.google.fr *.google.lu *.google.nl googleads.g.doubleclick.net 'self' web-chat.nativechat.com https://cdn.insight.sitefinity.com https://dec.azureedge.net; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: *.acv-csc.be *.acvcsc.be *.hetacv.be *.lacsc.be *.diecsc.be *.dmz-web.acv-csc.intranet; frame-src blob: *.acv-csc.be *.acvcsc.be *.hetacv.be *.lacsc.be *.diecsc.be *.dmz-web.acv-csc.intranet *.acv-bie.be https://acv-flash.be *.issuu.com surfly.com *.hotjar.com *.google.com *.facebook.com *.2tt.be *.youtube.com *.youtube-nocookie.com *.soundcloud.com https://*.talkjs.com https://pc201.be https://pc311.be *.appoint.be 'self' web-chat.nativechat.com; connect-src data: accounts.google.com *.gstatic.com blob: *.acv-csc.be *.acvcsc.be *.hetacv.be *.lacsc.be *.diecsc.be *.dmz-web.acv-csc.intranet *.hotjar.com ws://*.hotjar.com *.googleapis.com *.google-analytics.com *.analytics.google.com *.facebook.net *.doubleclick.net surfly.com *.hotjar.io ws://*.hotjar.io *.facebook.com *.mktoresp.com *.smartcall.cc *.trackjs.com https://*.talkjs.com wss://*.talkjs.com https://directline.botframework.com wss://directline.botframework.com *.google.com *.google.be *.google.co.uk *.google.de *.google.fr *.google.lu *.google.nl *.googletagmanager.com 'self' https://*.insight.sitefinity.com https://*.dec.sitefinity.com; media-src 'self' data: blob: https://*.talkjs.com; child-src https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com 'self' web-chat.nativechat.com; frame-ancestors 'self' *.acv-csc.be *.acvcsc.be *.hetacv.be *.lacsc.be *.diecsc.be *.dmz-web.acv-csc.intranet *.acv-bie.be *.issuu.com surfly.com *.hotjar.com *.google.com *.facebook.com; object-src 'self' data: blob: *.acv-csc.be *.acvcsc.be *.hetacv.be *.lacsc.be *.diecsc.be *.dmz-web.acv-csc.intranet |
| strict-transport-security: |
max-age=31536000; includeSubDomains |
| x-content-type-options: |
nosniff |
| x-frame-options: |
SAMEORIGIN |
| x-xss-protection: |
1; mode=block |
| referrer-policy: |
no-referrer-when-downgrade |
| x-oneagent-js-injection: |
true |
| x-ruxit-js-agent: |
true |
| server-timing: |
dtSInfo;desc="0", dtRpid;desc="-982276911" |
| set-cookie: |
dtCookie=v_4_srv_4_sn_DCD3E3942D521C63C4A1E39806012B92_perc_100000_ol_0_mul_1_app-3A30c70be1bc1dbcd1_0; Path=/; Domain=.hetacv.be; secure,f5avraaaaaaaaaaaaaaaa_session_=KAIHLCEHNFOGJFPNEBOODJHHACCEBLPKHLOLEGMAMBEDCMMHMPKIOFAENJPMBCBGIHJDJABGIBBJKOBKIGDABFPCILJOCNMPHLHLBDLOFPBHLNEAGOCEEDIBMHONKPKG; HttpOnly; secure;,f5_cspm=1234;;,TS016cd1bc=015716e1fd4f3a0900d111e313c63876e6134cd500d56226e4df507a49c68523a2f125b91a70a6b6ae5ae047af6f36bdfd32920101ff13c7a7348e529004a032b499f4c063ec2505e2346a140de0e741ec523fd46524e0ea3d5f5a5525df35f3b2123c2106; Path=/; Domain=.www.hetacv.be |
| date: |
Wed, 02 Oct 2024 20:49:22 GMT |
| connection: |
close |
| content-length: |
37498 |
