access-control-allow-headers | Content-Type, Authorization |
access-control-allow-methods | GET,POST |
access-control-max-age | 1800 |
content-encoding | gzip |
content-security-policy | default-src 'self' https://*.intel.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.ads-twitter.com https://*.brightcove.com https://*.brightcove.net https://*.doubleclick.net https://*.cookielaw.org https://*.facebook.net https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.hotjar.com https://*.hsforms.net https://*.intel.com https://*.jsdelivr.net https://*.licdn.com https://*.stackadapt.com https://*.zencdn.net ; style-src 'self' 'unsafe-inline' https://*.brightcove.net https://*.googleapis.com https://*.intel.com https://*.stackadapt.com ; object-src 'none' ; base-uri 'self' ; connect-src 'self' https://*.akamaihd.net https://*.boltdns.net https://*.brightcove.com https://*.cloudfront.net https://*.cookielaw.org https://*.doubleclick.net https://*.google.com https://*.googlesyndication.com wss://*.hotjar.com https://*.hotjar.io https://*.hotjar.com https://*.hsforms.com https://*.intel.com https://*.linkedin.com https://*.onetrust.com https://*.stackadapt.com ; font-src 'self' data: https://*.gstatic.com https://*.intel.com ; frame-src 'self' https://*.brightcove.net https://*.doubleclick.net https://*.google.com https://*.hsforms.com https://*.hsforms.net https://*.intel.com ; img-src 'self' data: https://*.boltdns.net https://*.brightcove.com https://*.cloudfront.net https://*.cookielaw.org https://*.facebook.com https://*.google.com https://*.gravatar.com https://*.intel.com https://*.linkedin.com https://t.co https://*.twitter.com https://*.w.org ; manifest-src 'self' ; media-src 'self' data: blob: https://*.brightcove.net https://*.cloudfront.net https://*.intel.com ; worker-src blob: ; block-all-mixed-content ; upgrade-insecure-requests ; |
content-type | text/html; charset=UTF-8 |
cross-origin-embedder-policy | unsafe-none; report-to='default' |
cross-origin-embedder-policy-report-only | unsafe-none; report-to='default' |
cross-origin-opener-policy | unsafe-none |
cross-origin-opener-policy-report-only | unsafe-none; report-to='default' |
cross-origin-resource-policy | cross-origin |
front-end-https | on |
link | <https://www.intelcapital.com/wp-json/>; rel="https://api.w.org/" |
permissions-policy | accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), gamepad=(), serial=() |
referrer-policy | strict-origin-when-cross-origin |
server | Apache |
server-timing | dtSInfo;desc="0", dtRpid;desc="-1227149059" |
vary | Accept-Encoding,Origin |
x-content-security-policy | default-src 'self'; img-src *; media-src * data:; |
x-content-type-options | nosniff |
x-dns-prefetch-control | on |
x-forwarded-proto | https |
x-forwarded-protocol | https |
x-forwarded-ssl | on |
x-frame-options | SAMEORIGIN |
x-oneagent-js-injection | true |
x-permitted-cross-domain-policies | none |
x-ruxit-js-agent | true |
x-url-scheme | https |
x-xss-protection | 1; mode=block |
xdomainrequestallowed | 0 |
content-length | 10393 |
cache-control | no-cache |
expires | Wed, 23 Oct 2024 02:26:38 GMT |
date | Wed, 23 Oct 2024 02:26:38 GMT |
set-cookie | 149 Zeichen |
x-grn | 0.23284317.1729650396.15142db0 |
strict-transport-security | max-age=31536000 ; includeSubDomains ; preload |
access-control-allow-origin | * |
statuscode | 200 |
http_version | HTTP/2 |
(Nice to have)