HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 21 Dec 2020 07:09:47 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15724800; includeSubdomains;
Referrer-Policy: origin-when-cross-origin
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' *.onewp.net ;   style-src 'unsafe-inline' 'self' data: *.google.com *.facebook.com *.enalyzer.com *.adform.net *.facebook.net *.northfork.se *.elfsight.com *.hotjar.com *.hotjar.io *.onewp.net *.google.com *.googleapis.com use.typekit.net p.typekit.net *.clickdimensions.com *.msecnd.net *.vo.msecnd.net *.azureedge.net *.svc.dynamics.com;   font-src 'self' *.google.com *.google.se  *.facebook.com *.enalyzer.com *.adform.net *.facebook.net fonts.gstatic.com data: *.northfork.se *.hotjar.com *.hotjar.io *.elfsight.com *.onewp.net *.prod.onewp.net *.staging.onewp.net use.typekit.net *.clickdimensions.com *.msecnd.net *.vo.msecnd.net *.azureedge.net *.svc.dynamics.com;   script-src 'self' *.google.com *.google.se *.facebook.com *.enalyzer.com *.adform.net *.facebook.net *.northfork.se *.elfsight.com *.onewp.net *.hotjar.com *.hotjar.io *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.google.com use.typekit.net sc-static.net *.sc-static.net *.clickdimensions.com *.msecnd.net *.vo.msecnd.net *.azureedge.net *.svc.dynamics.com *.papaya.no 'unsafe-inline' 'unsafe-eval' blob:;   connect-src 'self' *.google.com *.google.se *.facebook.com *.enalyzer.com *.adform.net *.facebook.net *.northfork.se *.elfsight.com *.onewp.net *.hotjar.com *.hotjar.io *.googleadservices.com *.google-analytics.com yoast.com performance.typekit.net oocd-api.azurewebsites.net *.azureedge.net *.svc.dynamics.com;   worker-src 'self' blob: ;   child-src 'self' blob: ;   img-src 'self' data: *.google.com *.google.se *.facebook.com *.adform.net *.facebook.net *.northfork.se *.elfsight.com *.hotjar.com *.hotjar.io *.cdninstagram.com *.onewp.net *.google-analytics.com *.gstatic.com *.doubleclick.net secure.gravatar.com s.w.org p.typekit.net *.clickdimensions.com *.msecnd.net *.vo.msecnd.net *.azureedge.net *.svc.dynamics.com;   frame-src 'self' *
Link: <https://www.grandiosa.no/wp-json/>; rel="https://api.w.org/"
Link: <https://www.grandiosa.no/>; rel=shortlink
X-XSS-Protection: 1; mode=block
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 a85237a973764508fd8041ece71eb937.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DFW50-C1
X-Amz-Cf-Id: LvXLr0YR0B9FiZrJDsQALv4hoV3YOKqpR9v5J3AQcinejY5ayWtV9A==