HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 165783
Content-Type: text/html; charset=utf-8
Set-Cookie: ASP.NET_SessionId=5lvmzq2x2txrqzu20jiqvtgx; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: ARRAffinity=31c60be30e5d13f70d96c20efa92772b7eed93e6d96b483a4301dd010dde5f58;Path=/;HttpOnly;Secure;Domain=www.windesheim.nl
Set-Cookie: ARRAffinitySameSite=31c60be30e5d13f70d96c20efa92772b7eed93e6d96b483a4301dd010dde5f58;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.windesheim.nl
Strict-Transport-Security: max-age=31536000
X-Frame-Options: Deny
Content-Security-Policy: base-uri 'self';  connect-src 'self' https://*.hotjar.com https://stats.g.doubleclick.net https://www.google-analytics.com wss://*.hotjar.com;  default-src 'self';  font-src 'self' https://fonts.gstatic.com;  frame-src 'self' https://6963312.fls.doubleclick.net https://tr.snapchat.com https://vars.hotjar.com https://www.youtube.com;  img-src 'self' 'unsafe-inline' data: https://ssl.gstatic.com/ https://connect.facebook.net https://www.facebook.com www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.google.nl https://www.google-analytics.com https://img.youtube.com https://www.windesheim.nl;  manifest-src 'self';  media-src 'self';  object-src 'none';  script-src 'unsafe-eval' 'report-sample' 'self' 'unsafe-inline' https://ads.creative-serving.com/pixel https://analytics-eu.clickdimensions.com/ts.js https://connect.facebook.net/en_US/fbevents.js https://googleads.g.doubleclick.net/pagead/viewthroughconversion/AW-990090314/ https://sc-static.net/scevent.min.js https://script.hotjar.com/modules.12a000c0e299f1f15c0c.js https://static.hotjar.com/c/hotjar-1386184.js https://static2.creative-serving.com/pixel.js https://track.adform.net/serving/scripts/trackpoint/async/ https://www.google-analytics.com/analytics.js https://www.googleadservices.com/pagead/conversion_async.js https://tagmanager.google.com/ https://www.googletagmanager.com https://www.googletagmanager.com/gtm.js https://www.googletagmanager.com/debug/bootstrap https://static2.creative-serving.com https://script.hotjar.com https://analytics-eu.clickdimensions.com https://connect.facebook.net https://s2.adform.net https://track.adform.net;  style-src 'report-sample' 'self' 'unsafe-inline' https://fonts.googleapis.com ttps://tagmanager.google.com/;  worker-src 'none';
X-Azure-Ref: 0Vx4HYAAAAAClJq4rBodrRK0eD7nPJ3aUV1NURURHRTA4MTQAOTkzMGZhODYtMjJmNi00ZTQ4LWI4ZGItYzVkZDYwNjYzYzQz
Set-Cookie: ASLBSA=7e2c1641f0001e2c3b9943d73106e3e47d515e9235b27ed33c32c71b91bc8f3e; path=/; secure
Set-Cookie: ASLBSACORS=7e2c1641f0001e2c3b9943d73106e3e47d515e9235b27ed33c32c71b91bc8f3e; samesite=none; path=/; secure
Date: Tue, 19 Jan 2021 18:00:56 GMT