Security Headers (3)X-Content-Type-Options: nosniffStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadcontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.usercentrics.eu https://*.cookieinformation.com https://*.hometogo.com https://*.google-analytics.com https://*.facebook.net https://*.g.doubleclick.net https://*.creativecdn.com https://unpkg.com https://bat.bing.com https://*.criteo.net https://*.criteo.com https://*.hubspot.com https://*.hsadspixel.net https://*.hs-scripts.com https://*.hs-banner.com https://*.hs-analytics.net https://*.hotjar.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: https:; frame-src 'self' https://*.creativecdn.com https://*.googletagmanager.com https://*.usercentrics.eu https://*.cookieinformation.com https://*.doubleclick.net https://*.appspot.com https://*.criteo.com; connect-src 'self' https: wss: https://policy.app.cookieinformation.com; child-src 'self' https://app.usercentrics.eu https://policy.app.cookieinformation.com; worker-src 'self' blob:; frame-ancestors 'self' https://*.ardennes-etape.be https://*.ardennes-etape.fr https://*.ardennes-etape.nl https://*.ardennes-etape.com https://*.ardennes-etape.de https://*.ardennes-etape.co.uk
