HTTP/1.1 200 OK
cache-control: private, max-age=1, must-revalidate
content-type: text/html;charset=UTF-8
server: 
set-cookie: JSESSIONID=6EB7DCBA81EBAD50CCE7BD2D2B1EDC37.sm3studiemeter2; Path=/; HttpOnly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self';		script-src 'self' 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com static.hotjar.com script.hotjar.com ssl.p.jwpcdn.com;		style-src 'self' 'unsafe-inline' fonts.googleapis.com/css;		img-src 'self' bff.uitgeverij-deviant.nl deviant-assets-dev.objectstore.true.nl deviant-assets.objectstore.true.nl deviant-streams.objectstore.true.nl www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com static.hotjar.com script.hotjar.com www.gravatar.com *.jwpltx.com *.ytimg.com  data:;		connect-src 'self' *.uitgeverij-deviant.nl deviant-streams.objectstore.true.nl www.google-analytics.com *.hotjar.com vc.hotjar.io:* ssl.p.jwpcdn.com prd.jwpltx.com *.novolanguage.com *.novo-learning.com wss:;		media-src *.uitgeverij-deviant.nl deviant-streams.objectstore.true.nl app-eu.readspeaker.com rstts-eu.readspeaker.com *.novolanguage.com *.novo-learning.com 'self' blob:;		font-src 'self' fonts.gstatic.com script.hotjar.com data:;		object-src 'self';		frame-ancestors 'none';		frame-src 'self' *.studiemeter.nl *.uitgeverij-deviant.nl deviant-assets.objectstore.true.nl app-eu.readspeaker.com rstts-eu.readspeaker.com vars.hotjar.com www.youtube-nocookie.com www.youtube.com player.vimeo.com;		child-src 'self' *.studiemeter.nl *.uitgeverij-deviant.nl deviant-assets.objectstore.true.nl app-eu.readspeaker.com rstts-eu.readspeaker.com vars.hotjar.com www.youtube-nocookie.com www.youtube.com player.vimeo.com blob:;		worker-src 'self' blob:;report-uri https://uitgeverijdeviant.report-uri.com/r/t/csp/enforce
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: 
date: Sun, 19 Sep 2021 17:52:24 GMT
set-cookie: SERVERID=web-sm03-9082; path=/; Secure
connection: close