HTTP/2 200 date: Thu, 22 Jan 2026 17:43:53 GMT content-type: text/html;charset=utf-8 content-length: 6055 referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 0 vary: Accept-Encoding access-control-allow-origin: * last-modified: Thu, 22 Jan 2026 17:43:31 GMT etag: W/"koElVEy2Ne" cache-control: max-age=30 cross-origin-resource-policy: same-origin cross-origin-opener-policy: same-origin cross-origin-embedder-policy: credentialless content-security-policy: base-uri 'none'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' https://*.sida.se https://*.openaid.se data: https://*.cloudfront.net; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'nonce-jwhZa2pf5pMo8RTy0/MoQzGk' blob: https://*.openaid.se https://sida.containers.piwik.pro; upgrade-insecure-requests; connect-src 'self' https://*.openaid.se https://tiles.openfreemap.org https://tiles.maps.eox.at https://demotiles.maplibre.org https://tile.googleapis.com https://api.maptiler.com https://xscfqmw63k.execute-api.eu-north-1.amazonaws.com https://sida.containers.piwik.pro https://sida.piwik.pro; default-src 'self'; origin-agent-cluster: ?1 x-dns-prefetch-control: off permissions-policy: camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=(), payment=()