fhs.se Review

 N/A

HTTP/1.0 302 Moved Temporarily
Location: https://fhs.se/
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

HTTP/1.1 301 
Location: https://www.fhs.se/
Connection: close
Content-Length: 0
Date: Thu, 21 Aug 2025 21:57:03 GMT
Expect-CT: Enforce, max-age=0
Strict-Transport-Security: max-age=16070400; includeSubDomains

HTTP/1.1 200 
Set-Cookie: JSESSIONID=810A921720A92A6E73B77F0339E4DDB1; Path=/; Secure; HttpOnly
Content-Security-Policy: default-src 'none';  script-src 'self' 'unsafe-inline' 'unsafe-eval' cookiehub.net  cdn.cookiehub.eu  ;  script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' cookiehub.net  cdn.cookiehub.eu  *.googletagmanager.com  *.gstatic.com  *.readspeaker.com  *.imbox.io  connect.facebook.net  *.hotjar.com mfstatic.com *.rekai.se  *.google.com  https://formconnector.com/form/formconnector.js  https://*.hotjar.com   ;  worker-src 'self' blob:;  connect-src 'self' *.google-analytics.com  *.mediaflow.com  *.mediaflowpro.com mfstatic.com *.readspeaker.com  *.rekai.se  ds.cookiehub.net  consent.cookiehub.net  region-eu.cookiehub.net  consent-eu.cookiehub.net  cookiehub.net  cdn.cookiehub.eu *.formconnector.com  https://*.hotjar.com  https://*.hotjar.io  wss://*.hotjar.com ;  style-src 'self' 'unsafe-inline' *.readspeaker.com  cookiehub.net  cdn.cookiehub.eu  mfstatic.com  *.mediaflow.com  *.mediaflowpro.com  https://*.hotjar.com  ;  font-src 'self' data: fonts.gstatic.com mfstatic.com  https://*.hotjar.com  ;  img-src 'self' data: *.facebook.com  *.readspeaker.com  *.mediaflowpro.com  *.mediaflow.com *.googletagmanager.com  i.ytimg.com  https://*.hotjar.com  ;  media-src 'self' blob: *.mediaflow.com  ;  frame-src 'self' *.plandisc.com  *.imbox.io  fhs.view360.se  www.youtube-nocookie.com  smartass.fhs.se  *.fhs.se  www.google.com  app.bwz.se ;  frame-ancestors 'self' ;   form-action 'self' *.readspeaker.com  *.formconnector.com app.bwz.se ;  manifest-src 'self' ;  upgrade-insecure-requests;
Referrer-Policy: same-origin
Strict-Transport-Security: max-age=16070400; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
P3P: CP="This is not a P3P policy!"
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Link: ; rel=preload; as=style
Link: ; rel=preload; as=style
Link: ; rel=preload; as=style
Link: ; rel=preload; as=style
Link: ; rel=preload; as=style
Link: ; rel=preload; as=style
Link: ; rel=preload; as=style
Link: ; rel=preload; as=style
Link: ; rel=preload; as=style
vary: accept-encoding
Content-Encoding: gzip
Content-Type: text/html;charset=UTF-8
Date: Thu, 21 Aug 2025 21:57:06 GMT
Connection: close
Expect-CT: Enforce, max-age=0