Finlit.fi - Oa.finlit.fi

document-policy: js-profiling
x-dns-prefetch-control: on
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=("https://www.youtube-nocookie.com/"), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff
referrer-policy: same-origin
report-to: {"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://o630684.ingest.us.sentry.io/api/4506066781339648/security/?sentry_key=779108af5c8aa3ea8cf89d2d4d6e71e1"}],"include_subdomains":true}
reporting-endpoints: csp-endpoint="https://o630684.ingest.us.sentry.io/api/4506066781339648/security/?sentry_key=779108af5c8aa3ea8cf89d2d4d6e71e1"
content-security-policy: default-src 'self'; script-src 'self' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://hypothes.is/embed.js https://cdn.hypothes.is/hypothesis/ 'unsafe-inline' https://storage.googleapis.com/operas/; style-src 'self' 'unsafe-inline' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn.hypothes.is/hypothesis/ https://storage.googleapis.com/operas/ blob:; font-src 'self' data: blob:; img-src 'self' https://storage.googleapis.com/press-fls-p-fls-front/ https://service-rua.s3.amazonaws.com/sks/files/media/ https://storage.googleapis.com/cstation/uploads/cms-public/ blob: data: https://i.vimeocdn.com/ https://ubiquity-partner-network.s3.eu-west-1.amazonaws.com/; connect-src 'self' https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.hypothes.is/api/ https://cdn.hypothes.is/ https://storage.googleapis.com/cstation/uploads/cms-public/ https://widget.doabooks.org/prism/ https://metrics-api.operas-eu.org/ https://o630684.ingest.sentry.io https://o630684.ingest.us.sentry.io; frame-src 'self' https://www.google.com/ https://hypothes.is/ https://mastofeed.com/ https://www.youtube.com/ https://www.youtube-nocookie.com/ https://player.vimeo.com/; worker-src 'self' blob:; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri https://o630684.ingest.us.sentry.io/api/4506066781339648/security/?sentry_key=779108af5c8aa3ea8cf89d2d4d6e71e1; report-to csp-endpoint
link: <https://oa.finlit.fi/en>; rel="alternate"; hreflang="en", <https://oa.finlit.fi/>; rel="alternate"; hreflang="fi", <https://oa.finlit.fi/>; rel="alternate"; hreflang="x-default"
set-cookie: NEXT_LOCALE=fi; Path=/; SameSite=lax
x-nonce: NzdlOTNiZGEtMWQ3Zi00ODA5LTlmOWUtNDNhNTc0NjA0NDY2
x-middleware-rewrite: /fi
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Accept-Encoding
x-nextjs-cache: STALE
x-nextjs-prerender: 1
x-nextjs-stale-time: 300
x-powered-by: Next.js
cache-control: s-maxage=60, stale-while-revalidate=31535940
etag: "9i4f0r7p7936c0"
content-type: text/html; charset=utf-8
content-encoding: gzip
date: Fri, 04 Jul 2025 17:29:42 GMT
via: 1.1 google
x-cache-status: miss
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000