{ "scan": { "algorithmVersion": 4, "grade": "C-", "error": null, "score": 45, "statusCode": 200, "testsFailed": 3, "testsPassed": 7, "testsQuantity": 10, "responseHeaders": { "date": "Sat, 16 May 2026 03:35:53 GMT", "content-type": "text/html;charset=UTF-8", "content-length": "3849", "connection": "close", "set-cookie": [ "JSESSIONID=1058B9EC55C925AD8A5D9C77B61BC4A0; Path=/; HttpOnly" ], "x-content-type-options": "nosniff", "x-xss-protection": "1; mode=block", "cache-control": "no-cache, no-store, max-age=0, must-revalidate", "pragma": "no-cache", "expires": "0", "x-frame-options": "DENY", "content-language": "en-US", "strict-transport-security": "max-age=31536000; includeSubDomains" } }, "tests": { "content-security-policy": { "expectation": "csp-implemented-with-no-unsafe", "pass": false, "result": "csp-not-implemented", "scoreModifier": -25, "data": null, "http": false, "meta": false, "policy": null, "numPolicies": 0 }, "cookies": { "expectation": "cookies-secure-with-httponly-sessions", "pass": false, "result": "cookies-session-without-secure-flag-but-protected-by-hsts", "scoreModifier": -10, "data": { "JSESSIONID": { "domain": "dd.eionet.europa.eu", "httponly": true, "path": "/", "port": null } }, "sameSite": false }, "cross-origin-resource-sharing": { "expectation": "cross-origin-resource-sharing-not-implemented", "pass": true, "result": "cross-origin-resource-sharing-not-implemented", "scoreModifier": 0, "data": null }, "redirection": { "expectation": "redirection-to-https", "pass": false, "result": "redirection-missing", "scoreModifier": -20, "destination": "http://dd.eionet.europa.eu/", "redirects": false, "route": [ "http://dd.eionet.europa.eu/" ], "statusCode": 200 }, "referrer-policy": { "expectation": "referrer-policy-private", "pass": true, "result": "referrer-policy-not-implemented", "scoreModifier": 0, "data": null, "http": false, "meta": false }, "strict-transport-security": { "expectation": "hsts-implemented-max-age-at-least-six-months", "pass": true, "result": "hsts-implemented-max-age-at-least-six-months", "scoreModifier": 0, "data": "max-age=31536000; includeSubDomains", "includeSubDomains": true, "maxAge": 31536000, "preload": false, "preloaded": false }, "subresource-integrity": { "expectation": "sri-implemented-and-external-scripts-loaded-securely", "pass": true, "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", "scoreModifier": 0, "data": {} }, "x-content-type-options": { "expectation": "x-content-type-options-nosniff", "pass": true, "result": "x-content-type-options-nosniff", "scoreModifier": 0, "data": "nosniff" }, "x-frame-options": { "expectation": "x-frame-options-sameorigin-or-deny", "pass": true, "result": "x-frame-options-sameorigin-or-deny", "scoreModifier": 0, "data": "DENY" }, "cross-origin-resource-policy": { "expectation": "corp-implemented-with-same-site", "pass": true, "result": "corp-not-implemented", "scoreModifier": 0, "data": null, "http": false, "meta": false } } }