HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Set-Cookie: website#lang=en; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
Set-Cookie: persistedCtx=lang=en; domain=.unisg.ch; expires=Sat, 05-Sep-2020 16:34:26 GMT; path=/; secure; HttpOnly
Set-Cookie: ASP.NET_SessionId=qk3bne31pprlvnjglxossoir; path=/; secure; HttpOnly; SameSite=Lax
Content-Security-Policy: default-src 'self' data: *.unisg.ch www.google-analytics.com ajax.googleapis.com fonts.gstatic.com;   script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.floodlight.com *.unisg.ch *.youtube.com *.pinterest.com *.ytimg.com *.googletagmanager.com *.google-analytics.com paper.li *.scoop.it code.jquery.com app-wallee.com cdnjs.cloudflare.com;   connect-src 'self' data: *.unisg.ch *.google-analytics.com *.doubleclick.net app-wallee.com; img-src 'self' data: *.unisg.ch *.euxeinos.info *.uni-sanktgallen.ch *.ytimg.com yimg.com *.yimg.com *.youtube.com *.google.com *.google-analytics.com *.g.doubleclick.net *.googletagmanager.com *.cdninstagram.com *.gstatic.com;   style-src 'self' 'unsafe-inline' *.unisg.ch *.scoop.it *.google.com fonts.googleapis.com;   frame-src 'self' *.unisg.ch *.google.com *.youtube.com datawrapper.dwcdn.net forms.nintex.com verdi.unisg.ch *.doubleclick.net paper.li *.scoop.it *.edoobox.com *.taktwerk.ch *.2vizcon.com pos.wemlin.com app-wallee.com;   frame-ancestors 'self' *.unisg.ch paper.li *.scoop.it *.facebook.com hsg2.stolzweb.ch;
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Origin: *
Date: Thu, 06 Aug 2020 16:34:26 GMT
Content-Length: 766702