keep-alive
289911
base-uri 'self';default-src 'self' blob:;font-src 'self' res.cloudinary.com script.hotjar.com fonts.gstatic.com data:;media-src 'self' res.cloudinary.com blob:;form-action 'self' qa-extra2-core.qa.gneis.io qa-circlekid-core.qa.gneis.io id.circlekeurope.com extra.circlekeurope.com;frame-src app.vwo.com https://*.visualwebsiteoptimizer.com omny.fm https://*.youtube.com youtube.com stage.id.naf.no id.naf.no embed.acast.com 6680107.fls.doubleclick.net web106.reachmee.com https://*.hotjar.com dntcl.qualaroo.com datawrapper.dwcdn.net consentcdn.cookiebot.com consent.cookiebot.com google.com https://*.google.com google.no https://*.google.no tpc.googlesyndication.com tourstart.org d1omrgmvhbogxk.cloudfront.net td.doubleclick.net secure.viewer.zmags.com;child-src omny.fm https://*.youtube.com youtube.com stage.id.naf.no id.naf.no embed.acast.com 6680107.fls.doubleclick.net web106.reachmee.com vars.hotjar.com static.hotjar.com dntcl.qualaroo.com datawrapper.dwcdn.net consentcdn.cookiebot.com consent.cookiebot.com google.com;style-src 'self' 'unsafe-inline' 'report-sample' https://*.visualwebsiteoptimizer.com s3.amazonaws.com app.vwo.com cdn.pushcrew.com fonts.googleapis.com optimize.google.com translate.googleapis.com https://*.hotjar.com www.googletagmanager.com;img-src 'self' *.visualwebsiteoptimizer.com cdn.pushcrew.com chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com chart.googleapis.com cdn.sanity.io sgtm.naf.no google.ie *.google.ie script.hotjar.com ade.googlesyndication.com data: www.naf.no res.cloudinary.com bildata.ofv.no *.google.com *.google.no *.google.dk *.google.es *.google.se *.google.de *.google.fi *.google.lv *.google.co.th *.google.pl *.google.com.tr *.google.co.uk *.google.co.nz *.google.lk *.google.co.id *.google.pt *.google.ch *.google.be *.googletagmanager.com www.googletagmanager.com *.googleapis.com pagead2.googlesyndication.com 6054118.global.siteimproveanalytics.io www.facebook.com marketing.naf.no *.clarity.ms c.clarity.ms bat.bing.com c.bing.com ad.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net *.gstatic.com img.youtube.com www.googleadservices.com www.analytics-debugger.com imgsct.cookiebot.com;script-src 'strict-dynamic' 'self' 'unsafe-inline' *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com consent.cookiebot.com consentcdn.cookiebot.com *.sgtm.naf.no sgtm.naf.no 'nonce-OYhDfPMGPplrj428vbsqlA==' script.hotjar.com euwa.puzzel.com connect.facebook.net maps.googleapis.com 'report-sample';script-src-attr 'self' 'unsafe-inline' consent.cookiebot.com m.facebook.com 'report-sample';object-src 'none';connect-src 'self' *.visualwebsiteoptimizer.com app.vwo.com *.ent.northeurope.azure.elastic-cloud.com *.puzzel.com google.com google.ie *.google.ie googleads.g.doubleclick.net *.google.com *.cookiebot.com *.hotjar.io *.hotjar.com *.mouseflow.com vc.hotjar.io pagead2.googlesyndication.com wss://sr-naf-ch-dev.service.signalr.net wss://sr-naf-ch-test.service.signalr.net wss://sr-naf-ch-prod.service.signalr.net sr-naf-ch-dev.service.signalr.net sr-naf-ch-test.service.signalr.net sr-naf-ch-prod.service.signalr.net wss://sigr-nafch-dev.service.signalr.net wss://sigr-nafch-test.service.signalr.net wss://sigr-nafch-prod.service.signalr.net sigr-nafch-dev.service.signalr.net sigr-nafch-test.service.signalr.net sigr-nafch-prod.service.signalr.net res.cloudinary.com in.hotjar.com stats.g.doubleclick.net stage.id.naf.no id.naf.no dev-api2.naf.no test-api2.naf.no api2.naf.no dc.services.visualstudio.com *.sgtm.naf.no sgtm.naf.no api.billan.nordea.no bat.bing.com *.clarity.ms www.clarity.ms wss://*.hotjar.com maps.googleapis.com www.gstatic.com naf.matomo.cloud video-analytics-api.cloudinary.com ws.geonorge.no/ region1.google-analytics.com analytics-api-s.cloudinary.com dev-api2.naf.no test-api2.naf.no api2.naf.no;frame-ancestors https://*.naf.no https://dev.cms.naf.no https://test.cms.naf.no https://cms.naf.no;upgrade-insecure-requests;worker-src 'self' blob:;manifest-src 'self'
text/html; charset=utf-8
same-origin
same-origin
Tue, 09 Jan 2024 18:19:34 GMT
W/"46c77-NF+caaWxWlC2z/g5uo9IxXttz9A"
?1
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(self "https://secure.viewer.zmags.com"), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(self), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), clipboard-read=(self), clipboard-write=(self), gamepad=(), hid=(self), idle-detection=(self), serial=(self), window-management=(self)
strict-origin-when-cross-origin
{"group":"report-endpoint","max_age":10886400,"include_subdomains":true,"endpoints":[{"url":"https://o208856.ingest.sentry.io/api/4504554433085440/security/?sentry_key=e20d599cae73471b86a8402369d3be1d","priority":1}]}
max-age=15552000; includeSubDomains
Accept-Encoding
nosniff
off
noopen
SAMEORIGIN
none
0
appId=cid-v1:c1cf01e8-38e6-463b-887e-892bf3c23514
|