yle.fi

Content-Type: text/html; charset=utf-8
Connection: keep-alive
Date: Sun, 31 May 2026 18:20:35 GMT
Content-Encoding: gzip
Strict-Transport-Security: max-age=63072000; preload
X-Frame-Options: DENY
Report-To: {"group":"csp-report-endpoint","max_age":10886400,"include_subdomains":false,"endpoints":[{"url":"https://csp.aws.yle.fi/index","priority":1}]}
Content-Security-Policy: child-src 'self' blob:;connect-src 'self' https://yle.fi https://*.yle.fi wss://*.yle.fi https://*.ylestatic.fi blob: https://*.akamaized.net https://endpoint.finnpanel.fi https://*.chartbeat.net https://api.mapbox.com https://events.mapbox.com https://api.flockler.com https://plugins.flockler.com https://*.stat.fi https://sak.userreport.com https://*.enetscores.com/ wss://migratory.enetpulse.com https://*.litix.io sdk.fra-02.braze.eu https://cl-eu6.k5a.io https://l.kilkaya.com wss://emqx.enetscores.com:8084 https://assets.adobedtm.com https://cm.everesttech.net https://*.demdex.net https://dpm.demdex.net https://*.omtrdc.net;default-src 'self';font-src data: https://yle.fi https://*.yle.fi https://*.ylestatic.fi https://*.enetscores.com/;frame-src 'self' https://docs.google.com/forms/ https://yle.fi https://*.yle.fi https://*.ylestatic.fi https://infogram.com https://e.infogram.com https://platform.twitter.com https://www.instagram.com https://tag.userreport.com https://chartbeat.com https://static2.chartbeat.com https://flockler.com/plugins/upload-form/ https://assets-decodeurs.lemonde.fr https://my.matterport.com https://vismasignforms.com;img-src 'self' blob: data: https://yle.fi https://*.yle.fi https://*.ylestatic.fi https://ping.chartbeat.net https://*.akamaized.net https://*.akamaihd.net https://*.analytics.edgekey.net https://*.cloudinary.com https://syndication.twitter.com https://visitanalytics.userreport.com https://flockler.com https://media-api.flockler.com https://fl-1.cdn.flockler.com https://fl-cdn.scdn1.secure.raxcdn.com https://*.enetscores.com/ https://api.mapbox.com https://cdn.braze.eu https://assets.adobedtm.com https://cm.everesttech.net https://*.demdex.net https://dpm.demdex.net https://*.omtrdc.net;manifest-src 'self';media-src blob: data: https://yle.fi https://*.yle.fi https://*.ylestatic.fi https://*.akamaihd.net https://*.akamaized.net;object-src 'none';script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' blob: https://yle.fi https://*.yle.fi https://*.ylestatic.fi https://static.chartbeat.com https://static2.chartbeat.com https://tunnus-sdk.yle.fi https://*.analytics.edgekey.net https://www.gstatic.com https://sak.userreport.com https://infogram.com https://e.infogram.com https://platform.twitter.com/ https://www.instagram.com/embed.js https://platform.instagram.com/ https://embed-cdn.flockler.com/embed-v2.js https://fl-1.cdn.flockler.com/ https://*.enetscores.com/ https://assets.adobedtm.com https://cm.everesttech.net https://*.demdex.net https://dpm.demdex.net https://*.omtrdc.net;style-src 'self' 'unsafe-inline' https://yle.fi https://*.yle.fi https://*.ylestatic.fi https://fl-1.cdn.flockler.com/ https://*.enetscores.com/;style-src-elem 'self' 'unsafe-inline' https://yle.fi https://*.yle.fi https://*.ylestatic.fi https://api.mapbox.com/ https://*.enetscores.com/;upgrade-insecure-requests;report-to csp-report-endpoint;report-uri https://csp.aws.yle.fi/index
X-Content-Type-Options: nosniff
Cache-Control: public, max-age=30
ETag: W/"7731d-oGYRMOhHruEEzfDb/6DDumpQJPM"
Via: 1.1 e33a7efffade24bd6702687553e6f9c0.cloudfront.net (CloudFront), 1.1 7aef920ed20c713960127526fa3a88f4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: CDG52-P4, CDG50-P2
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 2AAXEcrUtJcOvL7oPh_akD5CFlnmE-eiSRkZeipdGq0xncm4baD4Tw==
Age: 9