{ "scan": { "algorithmVersion": 4, "grade": "C+", "error": null, "score": 60, "statusCode": 200, "testsFailed": 2, "testsPassed": 8, "testsQuantity": 10, "responseHeaders": { "date": "Sat, 23 May 2026 05:22:08 GMT", "content-type": "text/html", "transfer-encoding": "chunked", "connection": "close", "last-modified": "Wed, 06 May 2026 13:23:53 GMT", "vary": "Accept-Encoding", "etag": "W/\"69fb40e9-d04\"", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "x-xss-protection": "1; mode=block", "content-security-policy": "default-src 'self' 'unsafe-inline' https://*.europa.eu https://geocode.arcgis.com https://reportnet3dev.s3.amazonaws.com https://static.arcgis.com ws:; font-src 'self' data: fonts.gstatic.com; img-src 'self' data: blob: image.flaticon.com https:; child-src blob:", "referrer-policy": "no-referrer", "feature-policy": "camera 'self'; microphone 'self'", "access-control-allow-origin": "*" } }, "tests": { "content-security-policy": { "expectation": "csp-implemented-with-no-unsafe", "pass": false, "result": "csp-implemented-with-unsafe-inline", "scoreModifier": -20, "data": { "default-src": [ "'self'", "'unsafe-inline'", "https://*.europa.eu", "https://geocode.arcgis.com", "https://reportnet3dev.s3.amazonaws.com", "https://static.arcgis.com", "ws:" ], "font-src": [ "'self'", "data:", "fonts.gstatic.com" ], "img-src": [ "'self'", "blob:", "data:", "https:", "image.flaticon.com" ], "child-src": [ "blob:" ] }, "http": true, "meta": false, "policy": { "antiClickjacking": false, "defaultNone": false, "insecureBaseUri": true, "insecureFormAction": true, "insecureSchemeActive": false, "insecureSchemePassive": false, "strictDynamic": false, "unsafeEval": false, "unsafeInline": true, "unsafeInlineStyle": true, "unsafeObjects": false }, "numPolicies": 1 }, "cookies": { "expectation": "cookies-secure-with-httponly-sessions", "pass": true, "result": "cookies-not-found", "scoreModifier": 0, "data": null, "sameSite": false }, "cross-origin-resource-sharing": { "expectation": "cross-origin-resource-sharing-not-implemented", "pass": true, "result": "cross-origin-resource-sharing-not-implemented", "scoreModifier": 0, "data": null }, "redirection": { "expectation": "redirection-to-https", "pass": false, "result": "redirection-missing", "scoreModifier": -20, "destination": "http://reportnet.europa.eu/", "redirects": false, "route": [ "http://reportnet.europa.eu/" ], "statusCode": 200 }, "referrer-policy": { "expectation": "referrer-policy-private", "pass": true, "result": "referrer-policy-private", "scoreModifier": 5, "data": "no-referrer", "http": true, "meta": false }, "strict-transport-security": { "expectation": "hsts-implemented-max-age-at-least-six-months", "pass": true, "result": "hsts-implemented-max-age-at-least-six-months", "scoreModifier": 0, "data": "max-age=31536000; includeSubDomains; preload", "includeSubDomains": true, "maxAge": 31536000, "preload": true, "preloaded": false }, "subresource-integrity": { "expectation": "sri-implemented-and-external-scripts-loaded-securely", "pass": true, "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", "scoreModifier": 0, "data": {} }, "x-content-type-options": { "expectation": "x-content-type-options-nosniff", "pass": true, "result": "x-content-type-options-nosniff", "scoreModifier": 0, "data": "nosniff" }, "x-frame-options": { "expectation": "x-frame-options-sameorigin-or-deny", "pass": true, "result": "x-frame-options-sameorigin-or-deny", "scoreModifier": 0, "data": "DENY" }, "cross-origin-resource-policy": { "expectation": "corp-implemented-with-same-site", "pass": true, "result": "corp-not-implemented", "scoreModifier": 0, "data": null, "http": false, "meta": false } } }