{
  "scan": {
    "algorithmVersion": 4,
    "grade": "A+",
    "error": null,
    "score": 115,
    "statusCode": 200,
    "testsFailed": 0,
    "testsPassed": 10,
    "testsQuantity": 10,
    "responseHeaders": {
      "date": "Sun, 24 May 2026 04:37:16 GMT",
      "content-type": "text/html; charset=UTF-8",
      "content-length": "6487",
      "connection": "close",
      "set-cookie": [
        "ocrnd7egevso=52f9be5a452bbd84bbf6b5d601af09e7; path=/; secure; HttpOnly; SameSite=Lax"
      ],
      "x-request-id": "2LylZJcmnDp8f0PoHMgK",
      "cache-control": "no-cache, no-store, must-revalidate",
      "content-security-policy": "default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-ZwaWyyNIjsJi5P4jMbQ4OYakbafh8kpAMnwCP6dnFu8=';script-src-elem 'strict-dynamic' 'nonce-ZwaWyyNIjsJi5P4jMbQ4OYakbafh8kpAMnwCP6dnFu8=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'",
      "feature-policy": "autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'",
      "x-robots-tag": "noindex, nofollow, noindex, nofollow",
      "referrer-policy": "no-referrer",
      "x-content-type-options": "nosniff",
      "x-download-options": "noopen",
      "x-frame-options": "SAMEORIGIN",
      "x-permitted-cross-domain-policies": "none",
      "x-xss-protection": "1; mode=block",
      "strict-transport-security": "max-age=31536000; includeSubDomains"
    }
  },
  "tests": {
    "content-security-policy": {
      "expectation": "csp-implemented-with-no-unsafe",
      "pass": true,
      "result": "csp-implemented-with-unsafe-inline-in-style-src-only",
      "scoreModifier": 0,
      "data": {
        "default-src": [
          "'none'"
        ],
        "base-uri": [
          "'none'"
        ],
        "manifest-src": [
          "'self'"
        ],
        "script-src": [
          "'nonce-zwawyynijsji5p4jmbq4oyakbafh8kpamnwcp6dnfu8='"
        ],
        "script-src-elem": [
          "'nonce-zwawyynijsji5p4jmbq4oyakbafh8kpamnwcp6dnfu8='",
          "'strict-dynamic'"
        ],
        "style-src": [
          "'self'",
          "'unsafe-inline'"
        ],
        "img-src": [
          "'self'",
          "blob:",
          "data:",
          "https://*.tile.openstreetmap.org"
        ],
        "font-src": [
          "'self'",
          "data:"
        ],
        "connect-src": [
          "'self'"
        ],
        "media-src": [
          "'self'"
        ],
        "frame-src": [
          "'self'"
        ],
        "frame-ancestors": [
          "'self'"
        ],
        "form-action": [
          "'self'"
        ]
      },
      "http": true,
      "meta": false,
      "policy": {
        "antiClickjacking": true,
        "defaultNone": true,
        "insecureBaseUri": false,
        "insecureFormAction": false,
        "insecureSchemeActive": false,
        "insecureSchemePassive": false,
        "strictDynamic": false,
        "unsafeEval": false,
        "unsafeInline": false,
        "unsafeInlineStyle": true,
        "unsafeObjects": false
      },
      "numPolicies": 1
    },
    "cookies": {
      "expectation": "cookies-secure-with-httponly-sessions",
      "pass": true,
      "result": "cookies-secure-with-httponly-sessions-and-samesite",
      "scoreModifier": 5,
      "data": {
        "oc_sessionPassphrase": {
          "domain": "cmshare.eea.europa.eu",
          "httponly": true,
          "path": "/",
          "port": null,
          "samesite": "lax",
          "secure": true
        },
        "__Host-nc_sameSiteCookielax": {
          "domain": "cmshare.eea.europa.eu",
          "expires": "2100-12-31T23:59:59.000Z",
          "httponly": true,
          "path": "/",
          "port": null,
          "samesite": "lax",
          "secure": true
        },
        "__Host-nc_sameSiteCookiestrict": {
          "domain": "cmshare.eea.europa.eu",
          "expires": "2100-12-31T23:59:59.000Z",
          "httponly": true,
          "path": "/",
          "port": null,
          "samesite": "strict",
          "secure": true
        },
        "ocrnd7egevso": {
          "domain": "cmshare.eea.europa.eu",
          "httponly": true,
          "path": "/",
          "port": null,
          "samesite": "lax",
          "secure": true
        }
      },
      "sameSite": true
    },
    "cross-origin-resource-sharing": {
      "expectation": "cross-origin-resource-sharing-not-implemented",
      "pass": true,
      "result": "cross-origin-resource-sharing-not-implemented",
      "scoreModifier": 0,
      "data": null
    },
    "redirection": {
      "expectation": "redirection-to-https",
      "pass": true,
      "result": "redirection-to-https",
      "scoreModifier": 0,
      "destination": "https://cmshare.eea.europa.eu/login",
      "redirects": true,
      "route": [
        "http://cmshare.eea.europa.eu/",
        "https://cmshare.eea.europa.eu/",
        "https://cmshare.eea.europa.eu/login"
      ],
      "statusCode": 200
    },
    "referrer-policy": {
      "expectation": "referrer-policy-private",
      "pass": true,
      "result": "referrer-policy-private",
      "scoreModifier": 5,
      "data": "no-referrer, same-origin",
      "http": true,
      "meta": true
    },
    "strict-transport-security": {
      "expectation": "hsts-implemented-max-age-at-least-six-months",
      "pass": true,
      "result": "hsts-implemented-max-age-at-least-six-months",
      "scoreModifier": 0,
      "data": "max-age=31536000; includeSubDomains",
      "includeSubDomains": true,
      "maxAge": 31536000,
      "preload": false,
      "preloaded": false
    },
    "subresource-integrity": {
      "expectation": "sri-implemented-and-external-scripts-loaded-securely",
      "pass": true,
      "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin",
      "scoreModifier": 0,
      "data": {}
    },
    "x-content-type-options": {
      "expectation": "x-content-type-options-nosniff",
      "pass": true,
      "result": "x-content-type-options-nosniff",
      "scoreModifier": 0,
      "data": "nosniff"
    },
    "x-frame-options": {
      "expectation": "x-frame-options-sameorigin-or-deny",
      "pass": true,
      "result": "x-frame-options-implemented-via-csp",
      "scoreModifier": 5,
      "data": "SAMEORIGIN"
    },
    "cross-origin-resource-policy": {
      "expectation": "corp-implemented-with-same-site",
      "pass": true,
      "result": "corp-not-implemented",
      "scoreModifier": 0,
      "data": null,
      "http": false,
      "meta": false
    }
  }
}