helsingborg.se

Access-Control-Allow-Origin: https://helsingborg.se
Alt-Svc: h3=":443"; ma=2592000
Content-Security-Policy: script-src 'unsafe-eval' 'unsafe-inline' helsingborg.se schema.org media.helsingborg.se stats.helsingborg.se api.helsingborg.se alarm.helsingborg.io account.psplugin.com app-cdn.puzzel.com helsingborg.mynewsdesk.com content.vergic.com blob:; style-src helsingborg.se 'unsafe-inline'; img-src media.helsingborg.se data: blob: *.basemaps.cartocdn.com server.arcgisonline.com https://*.basemaps.cartocdn.com; media-src 'self' blob:; frame-src 'self' blob: www.dagensluft.se helsingborg.mynewsdesk.com eservicetest.helsingborg.se youtu.be www.youtube.com youtube.com; object-src 'none'; form-action helsingborg.se 'self'; font-src helsingborg.se media.helsingborg.se data: https://*.psplugin.com static.entryscape.com; connect-src helsingborg.se schema.org media.helsingborg.se stats.helsingborg.se api.helsingborg.se alarm.helsingborg.io account.psplugin.com app-cdn.puzzel.com eservice.helsingborg.se translate.google.com www.w3.org visithelsingborg.com foretagare.helsingborg.se helsingborg-se.translate.goog businesshelsingborg.se www.google.com wssapp-commsrv.puzzel.com https://*.psplugin.com https://*.puzzel.com static.infra.entryscape.com; default-src 'none';  base-uri 'self'; upgrade-insecure-requests; block-all-mixed-content
Content-Type: text/html; charset=UTF-8
Cross-Origin-Embedder-Policy: unsafe-none;
Cross-Origin-Opener-Policy: same-origin-allow-popups;
Cross-Origin-Resource-Policy: same-origin;
Date: Mon, 01 Jun 2026 14:10:07 GMT
Etag: "305314-1780322714;;;"
Link: <https://helsingborg.se/wp-json/>; rel="https://api.w.org/", <https://helsingborg.se/wp-json/wp/v2/pages/2>; rel="alternate"; title="JSON"; type="application/json", <https://helsingborg.se/>; rel=shortlink
P3p: policyref=\"/w3c/p3p.xml\", CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"
Permissions-Policy: microphone=(), camera=(), geolocation=(), payment=(self)
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: none;
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block