HTTP/1.1 200 OK
Date: Sat, 14 Nov 2026 23:27:47 GMT
Server: Apache
Last-Modified: Wed, 21 Jun 2023 17:04:33 GMT
ETag: "237d-5fea6c30c8f1e"
Accept-Ranges: bytes
Content-Length: 9085
Cache-Control: public, max-age=3600
Keep-Alive: timeout=10, max=500
Connection: Keep-Alive
Content-Type: text/javascript

(function(window,document){"use strict";var CSRF_COOKIE_NAME="CSRFT759",CSRF_HEADER_NAME="X-CSRFT759",CSRF_PARAMETER_NAME="CSRFT759",CSRF_RUN_ONCE_FLAG_NAME="_CSRFT759",CSRF_XMLHTTPREQUEST_PROPERTY_NAME="_CSRFT759",LOCATION_WITHOUT_PORT=null,LOCATION_WITH_PORT=null,LOCATION_PROTOCOL_RELATIVE_WITHOUT_PORT=null,LOCATION_PROTOCOL_RELATIVE_WITH_PORT=null,TOKEN_ADDED_TO_DOCUMENT_FORMS=false,CACHED_COOKIE_STRING=null,CSRF_TOKEN=null;if(!window[CSRF_RUN_ONCE_FLAG_NAME]){
window[CSRF_RUN_ONCE_FLAG_NAME]=true;initialize()}function initialize(){initializeVariables();updateCsrfToken();prepareXMLHttpRequest();prepareFetch();registerFormSubmitHandler();registerDocumentReadyHandler();createMutationObserver()}function initializeVariables(){var protocol=window.location.protocol,domain=window.location.hostname,port=window.location.port;if(protocol){if(protocol=="https:"){CSRF_COOKIE_NAME=CSRF_COOKIE_NAME+"-S"}if(domain){if(port){if((protocol=="http:"&&port=="80")||
(protocol=="https:"&&port=="443")){port=""}}if(!port){LOCATION_WITHOUT_PORT=protocol+"//"+domain;LOCATION_PROTOCOL_RELATIVE_WITHOUT_PORT="//"+domain;if(protocol=="http:"){port="80"}else if(protocol=="https:"){port="443"}}if(port){LOCATION_WITH_PORT=protocol+"//"+domain+":"+port;LOCATION_PROTOCOL_RELATIVE_WITH_PORT="//"+domain+":"+port}}}}function updateCsrfToken(){var currentCookieString=document.cookie;if(CACHED_COOKIE_STRING!=currentCookieString){CACHED_COOKIE_STRING=currentCookieString;
var currentCsrfToken=getCookie(currentCookieString,CSRF_COOKIE_NAME);if(currentCsrfToken){CSRF_TOKEN=currentCsrfToken}}}function prepareXMLHttpRequest(){if(window.XMLHttpRequest){var nativeOpen=XMLHttpRequest.prototype.open;XMLHttpRequest.prototype.open=function(method,url,async,user,password){var oldState=false;try{oldState=this[CSRF_XMLHTTPREQUEST_PROPERTY_NAME];if(oldState==null){oldState=false;this[CSRF_XMLHTTPREQUEST_PROPERTY_NAME]=oldState}}catch(e){}nativeOpen.apply(this,arguments);
var newState=false;try{newState=this[CSRF_XMLHTTPREQUEST_PROPERTY_NAME];if(newState==null){newState=false}}catch(e){}if(oldState==newState){try{this[CSRF_XMLHTTPREQUEST_PROPERTY_NAME]=!newState}catch(e){}try{if(isTokenNeededForMethod(method)&&isTokenNeededForLink(url)){updateCsrfToken();if(CSRF_TOKEN){this.setRequestHeader(CSRF_HEADER_NAME,CSRF_TOKEN)}}}catch(e){}}}}else if(window.ActiveXObject){var xmlHttpAvailable=false;try{var xmlHttpObject=new window.ActiveXObject("Microsoft.XMLHTTP");
if(xmlHttpObject){xmlHttpAvailable=true}}catch(e){}if(xmlHttpAvailable){window.XMLHttpRequest=function(){var self=this;this.xhr=new window.ActiveXObject("Microsoft.XMLHTTP");this.onreadystatechange=null;this.readyState=0;this.responseBody=null;this.responseStream=null;this.responseText="";this.responseXML=null;this.status=0;this.statusText="";this.xhr.onreadystatechange=function(){self.readyState=0;try{self.readyState=self.xhr.readyState}catch(e){}self.responseBody=null;
try{self.responseBody=self.xhr.responseBody}catch(e){}self.responseStream=null;try{self.responseStream=self.xhr.responseStream}catch(e){}self.responseText="";try{self.responseText=self.xhr.responseText}catch(e){}self.responseXML=null;try{self.responseXML=self.xhr.responseXML}catch(e){}self.status=0;try{self.status=self.xhr.status}catch(e){}self.statusText="";try{self.statusText=self.xhr.statusText}catch(e){}if(self.onreadystatechange){self.onreadystatechange.apply(this,arguments)}}};
window.XMLHttpRequest.prototype.abort=function(){this.xhr.abort()};window.XMLHttpRequest.prototype.getAllResponseHeaders=function(){this.xhr.getAllResponseHeaders()};window.XMLHttpRequest.prototype.getResponseHeader=function(header){this.xhr.getResponseHeader(header)};window.XMLHttpRequest.prototype.open=function(method,url,async,user,password){this.xhr.open(method,url,async,user,password);try{if(isTokenNeededForMethod(method)&&isTokenNeededForLink(url)){updateCsrfToken();if(CSRF_TOKEN){
this.xhr.setRequestHeader(CSRF_HEADER_NAME,CSRF_TOKEN)}}}catch(e){}};window.XMLHttpRequest.prototype.send=function(data){this.xhr.send(data)};window.XMLHttpRequest.prototype.setRequestHeader=function(header,value){this.xhr.setRequestHeader(header,value)};window.XMLHttpRequest.prototype.UNSENT=0;window.XMLHttpRequest.prototype.OPENED=1;window.XMLHttpRequest.prototype.HEADERS_RECEIVED=2;window.XMLHttpRequest.prototype.LOADING=3;window.XMLHttpRequest.prototype.DONE=4}}}function prepareFetch(){
if(window.fetch){var nativeFetch=window.fetch;window.fetch=function(input,init){var request=new Request(input,init);try{if(isTokenNeededForMethod(request.method)&&isTokenNeededForLink(request.url)){updateCsrfToken();if(CSRF_TOKEN){request=request.clone();request.headers.set(CSRF_HEADER_NAME,CSRF_TOKEN)}}}catch(e){}return nativeFetch(request)}}}function registerFormSubmitHandler(){addEventHandler(window,"submit",handleFormSubmit)}function registerDocumentReadyHandler(){
addEventHandler(window,"load",handleDocumentReady);addEventHandler(document,"DOMContentLoaded",handleDocumentReady);addEventHandler(document,"readystatechange",handleDocumentReadyStateChange)}function addEventHandler(target,event,handler){if(target.addEventListener){target.addEventListener(event,handler,false)}else if(target.attachEvent){target.attachEvent("on"+event,handler)}}function handleFormSubmit(event){if(event){var target=event.target;if(target){addTokenToForms(target)}}}
function handleDocumentReady(){addTokenToDocumentForms()}function handleDocumentReadyStateChange(){if(document.readyState=="complete"){addTokenToDocumentForms()}}function addTokenToDocumentForms(){if(!TOKEN_ADDED_TO_DOCUMENT_FORMS){TOKEN_ADDED_TO_DOCUMENT_FORMS=true;addTokenToForms(document)}}function addTokenToForms(node){if(node.nodeType==1){var tagNameLowerCase=node.tagName.toLowerCase();if(tagNameLowerCase=="form"){addTokenToForm(node)}}var formNodes=node.getElementsByTagName("form");
var formNodesLength=formNodes.length;for(var i=0;i<formNodesLength;i++){addTokenToForm(formNodes[i])}}function addTokenToForm(form){try{var method=form.getAttribute("method");if(isTokenNeededForMethod(method)){var action=form.getAttribute("action");if(!action||isTokenNeededForLink(action)){updateCsrfToken();if(CSRF_TOKEN){var input=form.elements[CSRF_PARAMETER_NAME];if(input){if(input.getAttribute("value")!=CSRF_TOKEN){input.setAttribute("value",CSRF_TOKEN)}}else{
input=document.createElement("input");input.setAttribute("type","hidden");input.setAttribute("name",CSRF_PARAMETER_NAME);input.setAttribute("value",CSRF_TOKEN);form.appendChild(input);var nativeSubmit=form.submit;form.submit=function(){addTokenToForm(form);return nativeSubmit.apply(this,arguments)}}}}}}catch(e){}}function createMutationObserver(){var MyMutationObserver=window.MutationObserver||window.WebKitMutationObserver||window.MozMutationObserver;if(MyMutationObserver){
var observer=new MyMutationObserver(documentMutated);observer.observe(document,{childList:true,subtree:true})}}function documentMutated(mutationRecords){var mutationRecordsLength=mutationRecords.length;for(var i=0;i<mutationRecordsLength;i++){var addedNodes=mutationRecords[i].addedNodes;processElements(addedNodes,addTokenToForms)}}function processElements(nodes,func){var nodesLength=nodes.length;for(var i=0;i<nodesLength;i++){var node=nodes[i];if(node.nodeType==1){func(node)}}}
function isTokenNeededForMethod(method){if(method){var uppercaseMethod=method.toUpperCase();if(uppercaseMethod=="GET"||uppercaseMethod=="HEAD"||uppercaseMethod=="OPTIONS"){return false}}return true}function linkMatches(link,linkPrefix){if(!linkPrefix){return false}return((link==linkPrefix)||startsWith(link,linkPrefix+"/"))}function isTokenNeededForLink(link){var result=false;if(link&&link!="#"){var linkLowerCase=link.toLowerCase();
if(startsWith(linkLowerCase,"javascript:")||startsWith(linkLowerCase,"data:")||startsWith(linkLowerCase,"mailto:")){result=false}else if(startsWith(linkLowerCase,"http://")||startsWith(linkLowerCase,"https://")){result=(linkMatches(linkLowerCase,LOCATION_WITHOUT_PORT)||linkMatches(linkLowerCase,LOCATION_WITH_PORT))}else if(startsWith(linkLowerCase,"http:")||startsWith(linkLowerCase,"https:")){result=false}else if(startsWith(linkLowerCase,"//")){
result=(linkMatches(linkLowerCase,LOCATION_PROTOCOL_RELATIVE_WITHOUT_PORT)||linkMatches(linkLowerCase,LOCATION_PROTOCOL_RELATIVE_WITH_PORT))}else{result=true}}return result}function getCookie(cookieString,cookieName){var result=null;if(cookieString&&cookieString.length>0){var cookies=cookieString.split(";");var i;for(i=cookies.length-1;i>=0;i--){var cookie=trim(cookies[i]);var pos=cookie.indexOf("=");if(pos!=-1){var cookieNameCandidate=cookie.substring(0,pos);
if(cookieNameCandidate==cookieName){result=cookie.substring(pos+1);break}}}}return result}function startsWith(str,startWith){if(str.startsWith){return str.startsWith(startWith)}else{var result=false;var startWithLength=startWith.length;if(str.length>=startWithLength){result=(startWith==str.substring(0,startWithLength))}return result}}function trim(str){if(str.trim){return str.trim()}else{return str.replace(/^\s+|\s+$/g,"")}}})(window,document);HTTP/1.1 303 See Other
Date: Sat, 14 Nov 2026 23:27:47 GMT
Server: Apache
Set-Cookie: AL_SESS-S=AW1u1MrLh_7AHyRVLOsbdJ5Oo54QDRcdW4MMRglmpyiCmaW4k0w!Qtkqq54uFLBqBYnE; Path=/; Domain=.baloise.de; Secure; HttpOnly; SameSite=Lax
Set-Cookie: CSRFT759-S=C7wjp2FjDmsIzz2Uc01cnA; Path=/; Domain=.baloise.de; Secure; SameSite=Strict
Content-Length: 165
Location: /auth/ui/app/auth/application/access?Location=https%3A%2F%2Finfoportal%2Ebaloise%2Ede%2Fapi%2Fjsonws
Connection: close
Content-Type: text/html

<html><body>Please follow <a href="/auth/ui/app/auth/application/access?Location=https%3A%2F%2Finfoportal%2Ebaloise%2Ede%2Fapi%2Fjsonws">this link</a></body></html>