HTTP/2 200 cache-control: no-cache, no-store pragma: no-cache content-type: text/html; charset=utf-8 set-cookie: .AspNetCore.Antiforgery=CfDJ8G1wYK4rI4JPqr-MGLWgjEnJOeYu1H2YilxZdZLSvQ_q34XMg4tGImQXbjeVj4yjTGHLn5oZSH24FJeZ133KSN3XyFwCU80XP6DCRGkeLiQQJRbzrBvy4eV-_hpP2FFzFjyy574j515arEghHsLS9lE; path=/; secure; samesite=strict; httponly x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-download-options: noopen x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 content-security-policy: block-all-mixed-content; base-uri 'self'; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:* *.google.com *.gstatic.com www.google-analytics.com *.addtoany.com use.fontawesome.com *.youtube.com *.ytimg.com *.googleapis.com googleapis.com *.googletagmanager.com *.cloudflare.com *.vimeo.com *.i-active.be googleads.g.doubleclick.net connect.facebook.net analytics.tiktok.com code.jquery.com deploy.mopinion.com static.hotjar.com script.hotjar.com sc-static.net deploy.mopinion.com *.cookiecode.nl static.forum.nl; style-src 'self' 'unsafe-inline' *.googleapis.com googleapis.com *.google.com *.addtoany.com cloud.typography.com *.myfonts.net *.typekit.net *.cloudflare.com *.i-active.be static.forum.nl; font-src 'self' *.gstatic.com data: *.typekit.net *.cloudflare.com *.i-active.be static.forum.nl; img-src 'self' data: *.google-analytics.com *.analytics-google.com *.gstatic.com *.googleapis.com googleapis.com *.google.com *.cloudflare.com www.google.nl www.facebook.com connect.facebook.net cover.biblion.nl *.ytimg.com *.nbc.bibliotheek.nl catalogus.bibliothekengroningen.nl *.leibniz.zbkb.nl static.forum.nl; child-src 'self' *.google.com *.addtoany.com *.youtube.com *.vimeo.com vimeo.com *.activetickets.com *.issuu.com *.recruitee.com *.linkedin.com *.twizzit.com safepay.com *.saferpay.com td.doubleclick.net open.spotify.com www.geodienst.xyz forms.office.com *.cookiecode.nl kiosk.bnc.nl static.forum.nl; frame-src 'self' *.google.com *.addtoany.com *.youtube.com *.vimeo.com vimeo.com *.activetickets.com *.issuu.com *.recruitee.com *.linkedin.com *.twizzit.com safepay.com *.saferpay.com td.doubleclick.net open.spotify.com www.geodienst.xyz forms.office.com *.cookiecode.nl kiosk.bnc.nl static.forum.nl; media-src 'self' *.youtube.com *.vimeo.com vimeo.com *.vimeocdn.com *.akamaized.net static.forum.nl; connect-src 'self' localhost:* wss://localhost:* *.projectguide.nl *.google-analytics.com *.analytics-google.com *.googleapis.com googleapis.com *.googleusercontent.com vimeo.com *.i-active.be stats.g.doubleclick.net analytics.tiktok.com deploy.mopinion.com wss://ws.hotjar.com content.hotjar.io metrics.hotjar.io www.facebook.com *.cookiecode.nl *.analytics.google.com static.forum.nl; object-src 'self' *.youtube.com *.vimeo.com vimeo.com static.forum.nl; form-action 'self' catalogus.forum.nl; worker-src 'self' static.forum.nl; manifest-src 'self' static.forum.nl; frame-ancestors 'self' https://kiosk.bnc.nl; date: Fri, 26 Dec 2025 12:35:50 GMT content-length: 181373