ff-hebertshausen.de Review

 N/A

HTTP/1.1 302 Moved Temporarily
Date: Sat, 23 Aug 2025 16:30:03 GMT
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Location: https://www.ff-hebertshausen.de/
alt-svc: h3=":443"; ma=2592000; persist=1
Strict-Transport-Security: max-age=63072000; includeSubdomains;
X-Frame-Options: sameorigin
X-XSS-Protection: 1
Expect-CT: max-age=0
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob: mediastream:; script-src * data: blob: mediastream: 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline' data: blob: mediastream:; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * data: blob: 'unsafe-inline'; font-src * blob: data: 'unsafe-inline'; worker-src * data: blob: mediastream: 'unsafe-inline' 'unsafe-eval'
Permissions-Policy: microphone=*, fullscreen=*, accelerometer=*, autoplay=*, camera=*, display-capture=*, encrypted-media=*, geolocation=*, gyroscope=*, payment=*, picture-in-picture=*, sync-xhr=*, usb=()
Cross-Origin-Embedder-Policy: unsafe-none
Cross-Origin-Opener-Policy: unsafe-none
Cross-Origin-Resource-Policy: cross-origin

HTTP/1.1 200 OK
Date: Sat, 23 Aug 2025 16:30:05 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Language,Cookie,Accept-Encoding
Content-Language: de
Set-Cookie: django_language=de; expires=Sun, 23-Aug-2026 16:30:05 GMT; Max-Age=31536000; Path=/; Secure
Content-Encoding: gzip
alt-svc: h3=":443"; ma=2592000; persist=1
Strict-Transport-Security: max-age=63072000; includeSubdomains;
X-Frame-Options: sameorigin
X-XSS-Protection: 1
Expect-CT: max-age=0
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob: mediastream:; script-src * data: blob: mediastream: 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline' data: blob: mediastream:; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * data: blob: 'unsafe-inline'; font-src * blob: data: 'unsafe-inline'; worker-src * data: blob: mediastream: 'unsafe-inline' 'unsafe-eval'
Permissions-Policy: microphone=*, fullscreen=*, accelerometer=*, autoplay=*, camera=*, display-capture=*, encrypted-media=*, geolocation=*, gyroscope=*, payment=*, picture-in-picture=*, sync-xhr=*, usb=()
Cross-Origin-Embedder-Policy: unsafe-none
Cross-Origin-Opener-Policy: unsafe-none
Cross-Origin-Resource-Policy: cross-origin