HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://s.ytimg.com https://script.crazyegg.com https://dnn506yrbagrg.cloudfront.net https://planner-widget.goabout.com https://stats.g.doubleclick.net https://www.gstatic.com https://track.adform.net https://blokks.co https://view.genial.ly https://*.cloudfront.net https://static.hotjar.com https://parking-widget.goabout.com https://script.hotjar.com https://*.lightning.force.com https://www.facebook.com https://snap.licdn.com https://connect.facebook.net https://in.hotjar.com/ https://stats.g.doubleclick.net https://radboudumc.bbvms.com/ https://cdn.bluebillywig.com; style-src 'self' 'unsafe-inline'  https://fast.fonts.net https://*.cloudfront.net https://fonts.googleapis.com https://*.lightning.force.com; img-src 'self'  https://www.google.com https://www.google.nl https://www.google-analytics.com https://stats.g.doubleclick.net https://static.genial.ly https://*.amazonaws.com https://*.lightning.force.com https://px.ads.linkedin.com https://www.facebook.com https://*.bbvms.com/ https://*.bluebillywig.com https://*.cloudfront.net; media-src 'self'  https://static.genial.ly/ https://radboudumc.bbvms.com/; font-src 'self'  data: https://*.cloudfront.net https://fonts.gstatic.com https://*.lightning.force.com https://cdn.bluebillywig.com/*; frame-ancestors 'self' https://bewerk.radboudumc.nl https://radboud.app.connexys.nl; frame-src 'self'  https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://radboudumc-web.ungerboeck.com https://planner-widget.goabout.com https://www.google.com https://docs.google.com https://view.genial.ly https://vars.hotjar.com https://parking-widget.goabout.com/ https://*.bbvms.com/ https://embed.nkr-cijfers.nl https://*.caresharing.eu.  https://*.bluebillywig.com; connect-src 'self'  https://www.google-analytics.com https://view.genial.ly https://*.lightning.force.com https://in.hotjar.com/ https://stats.g.doubleclick.net https://radboudumc.bbvms.com/; object-src 'self'; 
Set-Cookie: ASP.NET_SessionId=e4yrxhc15gm0djnvphx4hizw; path=/; secure; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=16070400; includeSubDomains
Date: Tue, 15 Dec 2020 22:32:46 GMT
Connection: close
Content-Length: 83973
Set-Cookie: BIGipServer~DMZ-PRD~www-radboudumc-443_pool=3315838595.47873.0000; path=/; Httponly; Secure
Referrer-Policy: strict-origin-when-cross-origin
Feature-Policy: vibrate 'self'; sync-xhr 'self'
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff