sr-mediathek.de Review

 N/A

HTTP/1.1 302 Found
Server: nginx
Date: Fri, 31 Mar 2023 12:15:55 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 1
Connection: keep-alive
Set-Cookie: PHPSESSID=5qo2j90d788rvfic859vbkg457; path=/
Expires: Fri, 31 Mar 2023 12:20:55 GMT
Cache-Control: max-age=300
Pragma: no-cache
Location: https://www.ardmediathek.de/sr/
Cache-Control: max-age=300
X-Cache: MISS
X-Loc: loc=300

HTTP/1.1 301 Moved Permanently
Content-Security-Policy: default-src 'self';connect-src *;style-src 'self' 'unsafe-inline';font-src 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.gstatic.com *.aticdn.net *.nmrodam.com *.imrworldwide.com *.sensic.net *.surveymonkey.com;img-src 'self' data: *.ardmediathek.de *.ard.de *.nmrodam.com *.imrworldwide.com;media-src * mediastream: blob:;frame-src * 'self' localhost:* *.ard.de *.nmrodam.com *.imrworldwide.com *.sensic.net *.surveymonkey.com mailto: tg: threema: fb-messenger:;frame-ancestors *;worker-src 'self' blob:
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: same-origin
X-DNS-Prefetch-Control: off
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
Origin-Agent-Cluster: ?1
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer
X-XSS-Protection: 0
Location: /sr
Content-Length: 0
Cache-Control: public, max-age=120
Date: Fri, 31 Mar 2023 12:15:56 GMT
Connection: keep-alive

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Security-Policy: default-src 'self';connect-src *;style-src 'self' 'unsafe-inline';font-src 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.gstatic.com *.aticdn.net *.nmrodam.com *.imrworldwide.com *.sensic.net *.surveymonkey.com;img-src 'self' data: *.ardmediathek.de *.ard.de *.nmrodam.com *.imrworldwide.com;media-src * mediastream: blob:;frame-src * 'self' localhost:* *.ard.de *.nmrodam.com *.imrworldwide.com *.sensic.net *.surveymonkey.com mailto: tg: threema: fb-messenger:;frame-ancestors *;worker-src 'self' blob:
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: same-origin
X-DNS-Prefetch-Control: off
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
Origin-Agent-Cluster: ?1
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer
X-XSS-Protection: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 39020
Cache-Control: public, max-age=36
Date: Fri, 31 Mar 2023 12:15:57 GMT
Connection: keep-alive