Umu.se - Bildmuseet.umu.se

location: https://www.bildmuseet.umu.se/
cache-control: no-cache
pragma: no-cache

HTTP/2 200 
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: br
expires: -1
vary: Accept-Encoding
set-cookie: ASP.NET_SessionId=nsxlvqshym4xpnkslfvaka5x; path=/; secure; HttpOnly; SameSite=Lax
x-ua-compatible: IE=edge
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy: default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' matomo.analys.cloud *.episerver.net player.vimeo.com oc-cdn-public-eur.azureedge.net digitalfeedback.euro.confirmit.com mfstatic.com ; style-src 'self' 'unsafe-inline' cloud.typography.com fonts.googleapis.com fontserver.umu.se oc-cdn-public-eur.azureedge.net use.typekit.com p.typekit.net mfstatic.com ; font-src 'self' data: fonts.gstatic.com use.typekit.com mfstatic.com ; img-src 'self' data: www.umu.se *.episerver.net www.google-analytics.com *.gstatic.com survey.userneeds.com *.googleusercontent.com *.siteimproveanalytics.io *.vimeocdn.com *.youtube.com *.ytimg.com streaming.kaltura.nordu.net *.mediaflowpro.com ; connect-src 'self' api.cms.umu.se matomo.analys.cloud oc-cdn-public-eur.azureedge.net digitalfeedback.euro.confirmit.com stats.userneeds.com *.mediaflow.com *.mediaflowpro.com mfstatic.com *.dna.ip-only.net ; base-uri 'self' ; frame-ancestors 'self' matomo.analys.cloud ; form-action 'self' ; object-src 'none' ; media-src blob: *.mediaflow.com mfstatic.com ; worker-src blob: ; frame-src 'self' oc-cdn-public-eur.azureedge.net www.google.com *.vimeo.com *.youtube.com api.kaltura.nordu.net *.cloudfront.net survey.userneeds.com stats.userneeds.com ; report-uri /api/CspReport;report-to csp-endpoint
x-content-type-options: nosniff
report-to: { "group": "csp-endpoint", "max_age": 10886400, "endpoints": [{ "url": "https://www.bildmuseet.umu.se:443/api/CspReport" }] }
x-frame-options: sameorigin
referrer-policy: no-referrer, same-origin
date: Thu, 08 May 2025 18:43:05 GMT
content-length: 10864
set-cookie: NSC_vnv-xfc-tvctjuft-443=ffffffffaf1a9a5045525d5f4f58455e445a4a42378b;path=/;secure;httponly