helmet.fi Review

 N/A

HTTP/1.1 301 Moved Permanently
Date: Wed, 27 Aug 2025 01:29:43 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
server: nginx
location: http://helmet.finna.fi
allow: GET, HEAD

HTTP/1.1 301 Moved Permanently
Date: Wed, 27 Aug 2025 01:29:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://helmet.finna.fi/
X-Content-Type-Options: nosniff
Vary: accept-encoding
Server: cloudflare
CF-RAY: 9757ccae6a29af72-NRT
alt-svc: h3=":443"; ma=86400

HTTP/1.1 200 OK
Date: Wed, 27 Aug 2025 01:29:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Security-Policy: default-src 'none'; script-src 'report-sample' 'self' http: https: wss: blob: https://*.kirjastot.fi https://zefzhat.appspot.com https://api.kirjastot.fi 'nonce-bI1V8dwVKx8KRRcYn303ikOcDThecwr1VZYuapFn984='; connect-src blob: data: 'self' https://analytics.finna.fi https://*.kirjastot.fi https://zefzhat.appspot.com https://stats.livezhat.com https://api.kirjastot.fi; style-src * 'unsafe-inline' https://commondatastorage.googleapis.com/livezhat/helmetkirjasto/; img-src * data: blob:; media-src * blob:; font-src * data:; base-uri 'self'; manifest-src 'self'; child-src blob:; frame-src https://*.kirjastot.fi https://*.biblioteken.fi https://experience.arcgis.com;
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Vary: Accept-Encoding
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Cf-Cache-Status: DYNAMIC
Content-Encoding: br
Set-Cookie: language=fi; HttpOnly; SameSite=Lax; Secure; Path=/
Set-Cookie: PHPSESSID=5c5denl4rjb22j9qacrefprmpdulr2mf; HttpOnly; SameSite=Lax; Secure; Path=/
Set-Cookie: ui=standard; HttpOnly; SameSite=Lax; Secure; Path=/
Set-Cookie: finna.fi=finna-fe-4; SameSite=Lax; Secure; Path=/; Domain=finna.fi
CF-RAY: 9757ccb04e0e80c0-NRT
alt-svc: h3=":443"; ma=86400