mcf.se

Content-Type: text/html; charset=utf-8
Content-Security-Policy: default-src 'self'; img-src 'self' data: *.msb.se *.mcf.se; frame-src 'self' mailto: qcnl.tv api.screen9.com www.google.com *.mynewsdesk.com brandrisk.smhi.se lastkaj.msb.se lastkaj.mcf.se mcf.ungapped.io ui.ungapped.com; font-src 'self' data: fonts.gstatic.com; connect-src 'self' *.readspeaker.com tracking.webbanalys.msb.se www.google.com; style-src 'self' 'unsafe-inline' *.readspeaker.com; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' sr.artologik.net srtry.artologik.net *.mynewsdesk.com tracking.webbanalys.msb.se *.readspeaker.com www.google.com www.gstatic.com dashboard.webbanalys.msb.se/js/container_F96Nf4nS_preview.js; frame-ancestors 'self';
Permissions-Policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Encoding: gzip
Content-Length: 39829
Cache-Control: public, max-age=166
Expires: Fri, 25 Sep 2026 10:20:59 GMT
Date: Fri, 25 Sep 2026 10:18:13 GMT
Connection: keep-alive
Vary: Accept-Encoding
Alt-Svc: h3=":443"; ma=93600
Strict-Transport-Security: max-age=600