oeh-salzburg.at

Server: nginx/1.27.2
Date: Thu, 04 Jun 2026 16:32:04 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Set-Cookie: PHPSESSID=73ae797c8f226d68de5d875befda4407; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-Redirect-By: WordPress
Location: https://www.oeh-salzburg.at/
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.braintreegateway.com https://matomo.oeh-salzburg.at https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com; font-src 'self' https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdnjs.cloudflare.com/ data:; img-src 'self' https://secure.gravatar.com data:; object-src 'none'; worker-src 'self' blob:; connect-src 'self' https://matomo.oeh-salzburg.at https://meine.oeh-salzburg.at;
Permissions-Policy: geolocation=(self), microphone=()
X-Frame-Options: sameorigin
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
alt-svc: h3=":443"; ma=86400;
Strict-Transport-Security: max-age=31536000