mh-hannover.de Review

 N/A

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 21 Aug 2025 06:10:45 GMT
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Location: https://mh-hannover.de/
Front-EndHttps: on
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 21 Aug 2025 06:10:46 GMT
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Location: https://www.mh-hannover.de/
Strict-Transport-Security: max-age=63072000

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 21 Aug 2025 06:10:47 GMT
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Location: https://www.mhh.de
Strict-Transport-Security: max-age=63072000

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 21 Aug 2025 06:10:48 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 16908
Connection: keep-alive
Content-Language: de
Expires: Thu, 21 Aug 2025 12:18:52 GMT
Cache-Control: max-age=22084
Pragma: public
X-TYPO3-Upstream: webl01
Content-Security-Policy: default-src 'self' https://*.mhh.de chrome-extension; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mhh.de https://*.youtube.com https://*.youtube-nocookie.com https://cdnjs.cloudflare.com https://spenden.twingle.de  ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://*.mhh.de https://*.youtube.com https://*.youtube-nocookie.com https://mh-hannover-390466.workflowcloud.com https://cdnjs.cloudflare.com https://spenden.twingle.de  ; script-src-attr 'self' 'unsafe-inline' https://*.mhh.de; connect-src 'self' https://*.mhh.de https://*.youtube-nocookie.com https://spenden.twingle.de; style-src 'self' 'unsafe-inline' https://*.mhh.de; img-src 'self' data: https://*.mhh.de https://*.ytimg.com  ; frame-src 'self' https://*.mhh.de https://*.youtube-nocookie.com https://mh-hannover-390466.workflowcloud.com https://gbo-app-znc.nintex.io https://spenden.twingle.de; child-src 'self' https://*.mhh.de https://*.youtube-nocookie.com https://mh-hannover-390466.workflowcloud.com https://gbo-app-znc.nintex.io https://spenden.twingle.de; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri https://www.mhh.de/_mc/csp; report-to https://www.mhh.de/_mc/csp
Feature-Policy: camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; usb 'none'
Permissions-Policy: camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), usb=()
Vary: Accept-Encoding
Content-Encoding: gzip
X-UA-Compatible: IE=edge
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
Referrer-Policy: strict-origin-when-cross-origin
Access-Control-Allow-Origin: https://www.mhh.de
Strict-Transport-Security: max-age=63072000