HTTP/1.1 200 OK Date: Thu, 25 Dec 2025 22:12:20 GMT Server: Apache Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.youtube.com *.openstreetmap.org *.vimeo.com *.frikanalen.no *.nuug.no yewtu.be *.kjemi.uio.no *.oreilly.com *.skolelinux.de *.googleapis.com remarkjs.com *.gstatic.com api.flattr.com; img-src 'self' twitter-badges.s3.amazonaws.com nuug.no data: secure.gravatar.com blob:; script-src-elem 'self' 'unsafe-inline' yewtu.be remarkjs.com *.flattr.com digg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' yewtu.be blob: *.googleapis.com *.gstatic.com; style-src 'self' 'unsafe-inline' *.googleapis.com; connect-src 'self' *.nuug.no *.googleapis.com; worker-src 'self' blob:; frame-src 'self' *.youtube.com blob:; frame-ancestors 'self' nuug.no; report-uri /csp-report-endpoint; Referrer-Policy: same-origin Report-To: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://f24dd70b087e791fbf1c81a30b0bb7f2.report-uri.com/a/d/g"}],"include_subdomains":true} Access-Control-Allow-Origin: nuug.no Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type Content-Length: 3566 Content-Type: text/html; charset=UTF-8