{ "scan": { "algorithmVersion": 4, "grade": "C+", "error": null, "score": 60, "statusCode": 200, "testsFailed": 3, "testsPassed": 7, "testsQuantity": 10, "responseHeaders": { "date": "Thu, 20 Nov 2025 08:57:41 GMT", "content-type": "text/html;charset=UTF-8", "transfer-encoding": "chunked", "connection": "close", "cache-control": "no-cache, no-store, max-age=0, must-revalidate", "pragma": "no-cache", "expires": "0", "x-xss-protection": "1; mode=block", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "set-cookie": [ "JSESSIONID=BC270A2B656B5C1C3A1753CD27003964; Path=/; HttpOnly" ], "content-language": "en-US", "strict-transport-security": "max-age=31536000; includeSubDomains" } }, "tests": { "content-security-policy": { "expectation": "csp-implemented-with-no-unsafe", "pass": false, "result": "csp-not-implemented", "scoreModifier": -25, "data": null, "http": false, "meta": false, "policy": null, "numPolicies": 0 }, "cookies": { "expectation": "cookies-secure-with-httponly-sessions", "pass": false, "result": "cookies-session-without-secure-flag-but-protected-by-hsts", "scoreModifier": -10, "data": { "JSESSIONID": { "domain": "rod.eionet.europa.eu", "httponly": true, "path": "/", "port": null } }, "sameSite": false }, "cross-origin-resource-sharing": { "expectation": "cross-origin-resource-sharing-not-implemented", "pass": true, "result": "cross-origin-resource-sharing-not-implemented", "scoreModifier": 0, "data": null }, "redirection": { "expectation": "redirection-to-https", "pass": true, "result": "redirection-to-https", "scoreModifier": 0, "destination": "https://rod.eionet.europa.eu/", "redirects": true, "route": [ "http://rod.eionet.europa.eu/", "https://rod.eionet.europa.eu/" ], "statusCode": 200 }, "referrer-policy": { "expectation": "referrer-policy-private", "pass": true, "result": "referrer-policy-not-implemented", "scoreModifier": 0, "data": null, "http": false, "meta": false }, "strict-transport-security": { "expectation": "hsts-implemented-max-age-at-least-six-months", "pass": true, "result": "hsts-implemented-max-age-at-least-six-months", "scoreModifier": 0, "data": "max-age=31536000; includeSubDomains", "includeSubDomains": true, "maxAge": 31536000, "preload": false, "preloaded": false }, "subresource-integrity": { "expectation": "sri-implemented-and-external-scripts-loaded-securely", "pass": false, "result": "sri-not-implemented-but-external-scripts-loaded-securely", "scoreModifier": -5, "data": { "https://cdn.datatables.net/1.10.16/js/jquery.dataTables.min.js": { "crossorigin": null, "integrity": null }, "https://cdn.datatables.net/1.10.16/js/dataTables.bootstrap.min.js": { "crossorigin": null, "integrity": null } } }, "x-content-type-options": { "expectation": "x-content-type-options-nosniff", "pass": true, "result": "x-content-type-options-nosniff", "scoreModifier": 0, "data": "nosniff" }, "x-frame-options": { "expectation": "x-frame-options-sameorigin-or-deny", "pass": true, "result": "x-frame-options-sameorigin-or-deny", "scoreModifier": 0, "data": "DENY" }, "cross-origin-resource-policy": { "expectation": "corp-implemented-with-same-site", "pass": true, "result": "corp-not-implemented", "scoreModifier": 0, "data": null, "http": false, "meta": false } } }