mau.se

Cache-Control: private
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
content-security-policy: default-src 'self'; font-src 'self' data: https://use.typekit.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.youtube.com https://dl.episerver.net https://ajax.googleapis.com https://connect.facebook.net https://use.typekit.net https://siteimproveanalytics.com https://script.e-space.se https://files.imbox.io https://apiv2.imbox.io https://*.rekai.se https://*.rek.ai https://www.riddle.com https://cdn.unibuddy.co/ https://script.extellio.com https://play.ladok.se/ https://cdnjs.cloudflare.com https://customer.cludo.com https://*.botframework.com https://cdn.ontame.io https://webshop.publit.com/; frame-src 'self' https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://youtube.com https://player.vimeo.com https://*.imbox.io https://api.screen9.com https://api.kaltura.nordu.net/ https://videos.kaltura.com/media https://dchsou11xk84p.cloudfront.net https://anchor.fm https://*.soundcloud.com https://share.transistor.fm https://mau.app.box.com https://www.podbean.com https://www.riddle.com https://unibuddy.co https://popcard.unibuddy.co/ https://podcasters.spotify.com https://app.powerbi.com https://survey.extellio.com https://survey.e-space.se https://mah365-my.sharepoint.com/ https://embed.ur.se https://embed.acast.com https://play.ladok.se/ https://open.spotify.com https://anchor.fm/ https://play.mediaflow.com/ https://user.skcdn.io/ https://creators.spotify.com/ https://play.mau.se/media/ https://qcnl.tv/ https://api.kltr.nordu.net/ https://webshop.publit.com/; style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com https://*.typekit.net https://www.riddle.com https://customer.cludo.com; img-src 'self' data: https://www.facebook.com https://*.bing.com https://*.pinterest.com https://*.google.com https://*.google.se https://*.mau.se https://mau.se https://static.mediaflowpro.com https://*.typekit.net https://*.siteimproveanalytics.io https://collector.ontame.io https://*.amazonaws.com blob:; connect-src 'self' data: https://*.rekai.se https://*.rek.ai blob: https://api.cludo.com https://api-eu1.cludo.com https://*.botframework.com https://*.powerplatform.com https://*.microsoft.com wss://europe.directline.botframework.com https://script.e-space.se/; worker-src blob:; child-src blob:; object-src 'self';
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-XSS-Protection: 0
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; preload
Date: Thu, 04 Jun 2026 16:24:14 GMT