{
  "scan": {
    "algorithmVersion": 4,
    "grade": "C",
    "error": null,
    "score": 55,
    "statusCode": 200,
    "testsFailed": 2,
    "testsPassed": 8,
    "testsQuantity": 10,
    "responseHeaders": {
      "date": "Thu, 27 Aug 2026 03:59:16 GMT",
      "content-type": "text/html; charset=utf-8",
      "transfer-encoding": "chunked",
      "connection": "close",
      "accept-ranges": "bytes",
      "age": "47",
      "content-security-policy": "default-src https: data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:; child-src 'self' blob:; connect-src https: data:; frame-src http: data:; upgrade-insecure-requests, default-src 'self'; object-src 'self'; base-uri 'self'; form-action 'self'; connect-src 'self' blob: https://globalland.vito.be https://api.friendlycaptcha.com/ https://cryo.land.copernicus.eu/ https://copernicus.discomap.eea.europa.eu/ https://servicios.idee.es/ https://phenology.vgt.vito.be/ https://public.tableau.com/ https://sh.dataspace.copernicus.eu/ https://mapserver.dataspace.copernicus.eu/ https://gisco-services.ec.europa.eu/ https://s3-eu-west-1.amazonaws.com/ https://geoserver.geoville.com/ https://geoserver.vlcc.geoville.com https://clms-prod.eea.europa.eu https://land.copernicus.eu https://*.eea.europa.eu https://cdn.arcgis.com/ https://www.arcgis.com/ https://utility.arcgisonline.com/ https://js.arcgis.com/ https://services.arcgisonline.com https://services.arcgis.com https://static.arcgis.com https://basemaps.arcgis.com/ https://*.arcgis.com/ https://*.eionet.europa.eu http://*.eea.europa.eu https://*.land.copernicus.eu https://cloudferro.sentinel-hub.com https://geospatial.jrc.ec.europa.eu https://image.discomap.eea.europa.eu; font-src 'self' data: https://cdn.arcgis.com/ https://js.arcgis.com/ https://fonts.gstatic.com/ https://*.eea.europa.eu https://*.eionet.europa.eu https://land.copernicus.eu https://*.land.copernicus.eu; frame-src 'self' https://europa.eu/ https://*.europa.eu/ https://*.eea.europa.eu https://*.eionet.europa.eu http://*.eea.europa.eu https://eea.maps.arcgis.com/ https://land.copernicus.eu https://*.land.copernicus.eu https://www.youtube.com https://youtube.com; img-src 'self' data: blob: https://*.s3.amazonaws.com https:; script-src 'self' 'nonce-P+3XWfHEOroBPriggwy5DQ==' 'unsafe-inline' 'unsafe-eval' blob: data: https://matomo.eea.europa.eu https://js.arcgis.com/ https://services.arcgis.com https://*.eea.europa.eu https://*.eionet.europa.eu http://*.eea.europa.eu https://cdnjs.cloudflare.com https://land.copernicus.eu https://*.land.copernicus.eu https://public.tableau.com; frame-ancestors 'self' *.europa.eu *.eionet.europa.eu *.eea.europa.eu *.discomap.eea.europa.eu https://eu-space.europa.eu/; media-src https://*.eea.europa.eu; style-src 'self' 'unsafe-inline' https://js.arcgis.com/ https://*.eionet.europa.eu https://*.eea.europa.eu https://cdnjs.cloudflare.com; report-uri https://sentry.eea.europa.eu/api/28/security/?sentry_key=6afdc4d9e7a148509fa0841b0e58a958;",
      "etag": "W/\"f2ec0-1VZl4ZsmB6TOwDwShhy12Y/AEZM-gzip\"",
      "grace": "",
      "vary": "Accept-Encoding",
      "via": "1.1 clms-frontend-dpl-varnish-7b9b8d4f78-dlfrh (Varnish/7.7)",
      "x-backend": "cluster(frontend-volto:(null))",
      "x-backend-name": "cluster(10.43.12.191:3000)",
      "x-cache": "HIT",
      "x-cacheable": "YES",
      "x-content-type-options": "nosniff",
      "x-url": "/en",
      "x-varnish": "1116671 1512313",
      "x-xss-protection": "\"1; mode=block\"",
      "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
      "server": "HTTPS",
      "expect-ct": "max-age=604800, report-uri='https://sentry.eea.europa.eu/api/45/security/?sentry_key=0343e20fc4e0469790b6016561f032e3'",
      "x-frame-options": "'SAMEORIGIN'",
      "referrer-policy": "strict-origin-when-cross-origin",
      "access-control-allow-headers": "Authorization, Content-Type, content-type",
      "permissions-policy": "accelerometer=(), autoplay=(), camera=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), sync-xhr=(self), usb=()"
    }
  },
  "tests": {
    "content-security-policy": {
      "expectation": "csp-implemented-with-no-unsafe",
      "pass": false,
      "result": "csp-header-invalid",
      "scoreModifier": -25,
      "data": null,
      "http": false,
      "meta": false,
      "policy": null,
      "numPolicies": 1
    },
    "cookies": {
      "expectation": "cookies-secure-with-httponly-sessions",
      "pass": true,
      "result": "cookies-not-found",
      "scoreModifier": 0,
      "data": null,
      "sameSite": false
    },
    "cross-origin-resource-sharing": {
      "expectation": "cross-origin-resource-sharing-not-implemented",
      "pass": true,
      "result": "cross-origin-resource-sharing-not-implemented",
      "scoreModifier": 0,
      "data": null
    },
    "redirection": {
      "expectation": "redirection-to-https",
      "pass": true,
      "result": "redirection-to-https",
      "scoreModifier": 0,
      "destination": "https://clms-staging.eea.europa.eu/en",
      "redirects": true,
      "route": [
        "http://clms-staging.eea.europa.eu/",
        "https://clms-staging.eea.europa.eu/",
        "https://clms-staging.eea.europa.eu/en"
      ],
      "statusCode": 200
    },
    "referrer-policy": {
      "expectation": "referrer-policy-private",
      "pass": true,
      "result": "referrer-policy-private",
      "scoreModifier": 5,
      "data": "strict-origin-when-cross-origin",
      "http": true,
      "meta": false
    },
    "strict-transport-security": {
      "expectation": "hsts-implemented-max-age-at-least-six-months",
      "pass": true,
      "result": "hsts-implemented-max-age-at-least-six-months",
      "scoreModifier": 0,
      "data": "max-age=31536000; includeSubDomains; preload",
      "includeSubDomains": true,
      "maxAge": 31536000,
      "preload": true,
      "preloaded": false
    },
    "subresource-integrity": {
      "expectation": "sri-implemented-and-external-scripts-loaded-securely",
      "pass": true,
      "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin",
      "scoreModifier": 0,
      "data": {}
    },
    "x-content-type-options": {
      "expectation": "x-content-type-options-nosniff",
      "pass": true,
      "result": "x-content-type-options-nosniff",
      "scoreModifier": 0,
      "data": "nosniff"
    },
    "x-frame-options": {
      "expectation": "x-frame-options-sameorigin-or-deny",
      "pass": false,
      "result": "x-frame-options-header-invalid",
      "scoreModifier": -20,
      "data": "'SAMEORIGIN'"
    },
    "cross-origin-resource-policy": {
      "expectation": "corp-implemented-with-same-site",
      "pass": true,
      "result": "corp-not-implemented",
      "scoreModifier": 0,
      "data": null,
      "http": false,
      "meta": false
    }
  }
}