HTTP/2 200 content-type: text/html; charset=utf-8 x-content-type-options: nosniff x-download-options: noopen x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:* *.google.com *.gstatic.com www.google-analytics.com *.jquery.com *.addtoany.com use.fontawesome.com *.cloudflare.com *.youtube.com *.ytimg.com *.googleapis.com *.googletagmanager.com connect.facebook.net cdnjs.cloudflare.com cdn.jsdelivr.net static.medialoc.eu www.ticketengine.nl *.medialoc.eu *.europe-west1.firebasedatabase.app blob: deploy.mopinion.com *.cookiecode.nl; style-src 'self' 'unsafe-inline' *.googleapis.com *.google.com *.cloudflare.com *.addtoany.com cloud.typography.com www.groningerforum.nl www.ticketengine.nl static.medialoc.eu; font-src 'self' *.gstatic.com data:; img-src 'self' data: www.google-analytics.com *.gstatic.com *.googleapis.com *.google.com www.facebook.com www.googletagmanager.com *.doubleclick.net *.google.nl *.googleusercontent.com cover.biblion.nl *.medialoc.eu *.google-analytics.com *.analytics-google.com; frame-src 'self' *.google.com *.addtoany.com *.youtube.com *.vimeo.com vimeo.com youtu.be www.facebook.com *.afasonline.com groningerforum.podiumnederland.nl forum.podiumnederland.nl tickets.forum.nl open.spotify.com *.europe-west1.firebasedatabase.app *.medialoc.eu; media-src 'self' *.youtube.com *.vimeo.com *.vimeocdn.com *.akamaized.net blob: *.b-cdn.net; connect-src 'self' localhost:* wss://localhost:* *.projectguide.nl www.google-analytics.com stats.g.doubleclick.net content-storage.googleapis.com sync-api.medialoc.eu *.googleusercontent.com static.medialoc.eu *.a.run.app wss://*.europe-west1.firebasedatabase.app licensing.bitmovin.com medialoc-vod.b-cdn.net license-global.pallycon.com *.google-analytics.com *.analytics-google.com deploy.mopinion.com *.cookiecode.nl; frame-ancestors ; date: Fri, 26 Dec 2025 17:16:30 GMT content-length: 80319