YLE.FI Website-Rezension

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 08 May 2024 07:31:31 GMT
Strict-Transport-Security: max-age=63072000; preload
X-Frame-Options: DENY
Report-To: {"group":"csp-report-endpoint","max_age":10886400,"include_subdomains":false,"endpoints":[{"url":"https://csp.aws.yle.fi/index","priority":1}]}
Content-Security-Policy: child-src 'self' blob:;connect-src 'self' https://yle.fi https://*.yle.fi https://*.ylestatic.fi blob: https://*.akamaized.net https://*.kaltura.com https://endpoint.finnpanel.fi https://*.chartbeat.net https://api.mapbox.com https://events.mapbox.com https://api.flockler.com https://plugins.flockler.com https://*.stat.fi https://sak.userreport.com https://*.enetscores.com/ wss://migratory.enetpulse.com https://assets.adobedtm.com https://cm.everesttech.net https://*.demdex.net https://dpm.demdex.net https://*.omtrdc.net;default-src 'self';font-src data: https://yle.fi https://*.yle.fi https://*.ylestatic.fi https://*.enetscores.com/;frame-src 'self' https://docs.google.com/forms/ https://yle.fi https://*.yle.fi https://*.ylestatic.fi https://infogram.com https://e.infogram.com https://platform.twitter.com https://www.instagram.com https://tag.userreport.com https://chartbeat.com https://static2.chartbeat.com https://flockler.com/plugins/upload-form/ https://assets-decodeurs.lemonde.fr;img-src 'self' blob: data: https://yle.fi https://*.yle.fi https://*.ylestatic.fi https://ping.chartbeat.net https://*.akamaized.net https://*.akamaihd.net https://*.analytics.edgekey.net https://*.cloudinary.com https://*.kaltura.com https://syndication.twitter.com https://visitanalytics.userreport.com https://flockler.com https://media-api.flockler.com https://fl-1.cdn.flockler.com https://fl-cdn.scdn1.secure.raxcdn.com https://*.enetscores.com/ https://assets.adobedtm.com https://cm.everesttech.net https://*.demdex.net https://dpm.demdex.net https://*.omtrdc.net;manifest-src 'self';media-src blob: data: https://yle.fi https://*.yle.fi https://*.ylestatic.fi https://*.akamaihd.net https://*.akamaized.net https://*.kaltura.com;object-src 'none';script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' blob: https://yle.fi https://*.yle.fi https://*.ylestatic.fi https://static.chartbeat.com https://static2.chartbeat.com https://tunnus-sdk.yle.fi https://*.analytics.edgekey.net https://*.kaltura.com https://www.gstatic.com https://sak.userreport.com https://infogram.com https://e.infogram.com https://platform.twitter.com/ https://www.instagram.com/embed.js https://platform.instagram.com/ https://embed-cdn.flockler.com/embed-v2.js https://fl-1.cdn.flockler.com/ https://*.enetscores.com/ https://assets.adobedtm.com https://cm.everesttech.net https://*.demdex.net https://dpm.demdex.net https://*.omtrdc.net;style-src 'self' 'unsafe-inline' https://yle.fi https://*.yle.fi https://*.ylestatic.fi https://fl-1.cdn.flockler.com/ https://*.enetscores.com/;style-src-elem 'self' 'unsafe-inline' https://yle.fi https://*.yle.fi https://*.ylestatic.fi https://api.mapbox.com/ https://*.enetscores.com/;upgrade-insecure-requests;report-to csp-report-endpoint;report-uri https://csp.aws.yle.fi/index
X-Content-Type-Options: nosniff
Cache-Control: public, max-age=30
ETag: W/"70e8c-IbgANM8bclB/oaDiCtsFRbcyVNE"
Content-Encoding: gzip
Via: 1.1 f3131b940cd6fd6a885d42f83a5b3a42.cloudfront.net (CloudFront), 1.1 d439433d975e4e608c1677c8e16e7fe2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: IAD61-P3
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
X-Amz-Cf-Pop: IAD50-C2
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 4dW23OT5EpsxPG6ZeYXU9Wn2c7YUaceJkBK3Va0TYPAE8hRrbPRHTA==