{
  "scan": {
    "algorithmVersion": 4,
    "grade": "B+",
    "error": null,
    "score": 80,
    "statusCode": 200,
    "testsFailed": 1,
    "testsPassed": 9,
    "testsQuantity": 10,
    "responseHeaders": {
      "date": "Sun, 24 May 2026 05:49:27 GMT",
      "server": "Apache/2.4.65 (Unix) OpenSSL/3.5.1",
      "strict-transport-security": "max-age=15768000; includeSubDomains;",
      "referrer-policy": "same-origin",
      "feature-policy": "fullscreen 'none'; microphone 'none'",
      "upgrade": "h2,h2c",
      "connection": "Upgrade, close",
      "last-modified": "Wed, 18 Dec 2024 15:21:08 GMT",
      "etag": "\"fb4-6298cf68e9379\"",
      "accept-ranges": "bytes",
      "content-length": "4020",
      "x-content-type-options": "nosniff",
      "x-xss-protection": "1; mode=block",
      "content-security-policy": "upgrade-insecure-requests; base-uri 'self'; connect-src 'self'  https://*.openstreetmap.org https://*.eea.europa.eu; default-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://*.eea.europa.eu; font-src 'self' data: https://fonts.gstatic.com https://*.eea.europa.eu; frame-ancestors 'self' https://*.eea.europa.eu; frame-src 'self' https://*.europa.eu https://europa.eu https://*.eea.europa.eu; img-src https: blob: data:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.eea.europa.eu https://ajax.aspnetcdn.com https://cdnjs.cloudflare.com https://code.jquery.com https://cdn.jsdelivr.net https://ajax.googleapis.com https://ajax.aspnetcdn.com/; style-src-elem 'self' 'unsafe-inline' https://*.eea.europa.eu https://inspire.ec.europa.eu https://cdnjs.cloudflare.com https://*.googleapis.com https://unpkg.com/tailwindcss@2.2.19/dist/tailwind.min.css https://resources.etf-validator.net",
      "content-type": "text/html"
    }
  },
  "tests": {
    "content-security-policy": {
      "expectation": "csp-implemented-with-no-unsafe",
      "pass": false,
      "result": "csp-implemented-with-unsafe-inline",
      "scoreModifier": -20,
      "data": {
        "upgrade-insecure-requests": [
          "'none'"
        ],
        "base-uri": [
          "'self'"
        ],
        "connect-src": [
          "'self'",
          "https://*.eea.europa.eu",
          "https://*.openstreetmap.org"
        ],
        "default-src": [
          "'self'",
          "'unsafe-eval'",
          "'unsafe-inline'",
          "blob:",
          "https://*.eea.europa.eu"
        ],
        "font-src": [
          "'self'",
          "data:",
          "https://*.eea.europa.eu",
          "https://fonts.gstatic.com"
        ],
        "frame-ancestors": [
          "'self'",
          "https://*.eea.europa.eu"
        ],
        "frame-src": [
          "'self'",
          "https://*.eea.europa.eu",
          "https://*.europa.eu",
          "https://europa.eu"
        ],
        "img-src": [
          "blob:",
          "data:",
          "https:"
        ],
        "object-src": [
          "'none'"
        ],
        "script-src": [
          "'self'",
          "'unsafe-eval'",
          "'unsafe-inline'",
          "blob:",
          "https://*.eea.europa.eu",
          "https://ajax.aspnetcdn.com",
          "https://ajax.googleapis.com",
          "https://cdn.jsdelivr.net",
          "https://cdnjs.cloudflare.com",
          "https://code.jquery.com"
        ],
        "style-src-elem": [
          "'self'",
          "'unsafe-inline'",
          "https://*.eea.europa.eu",
          "https://*.googleapis.com",
          "https://cdnjs.cloudflare.com",
          "https://inspire.ec.europa.eu",
          "https://resources.etf-validator.net",
          "https://unpkg.com/tailwindcss@2.2.19/dist/tailwind.min.css"
        ]
      },
      "http": true,
      "meta": false,
      "policy": {
        "antiClickjacking": true,
        "defaultNone": false,
        "insecureBaseUri": false,
        "insecureFormAction": true,
        "insecureSchemeActive": false,
        "insecureSchemePassive": false,
        "strictDynamic": false,
        "unsafeEval": true,
        "unsafeInline": true,
        "unsafeInlineStyle": true,
        "unsafeObjects": false
      },
      "numPolicies": 1
    },
    "cookies": {
      "expectation": "cookies-secure-with-httponly-sessions",
      "pass": true,
      "result": "cookies-not-found",
      "scoreModifier": 0,
      "data": null,
      "sameSite": false
    },
    "cross-origin-resource-sharing": {
      "expectation": "cross-origin-resource-sharing-not-implemented",
      "pass": true,
      "result": "cross-origin-resource-sharing-not-implemented",
      "scoreModifier": 0,
      "data": null
    },
    "redirection": {
      "expectation": "redirection-to-https",
      "pass": true,
      "result": "redirection-to-https",
      "scoreModifier": 0,
      "destination": "https://sdi.eea.europa.eu/",
      "redirects": true,
      "route": [
        "http://sdi.eea.europa.eu/",
        "https://sdi.eea.europa.eu/"
      ],
      "statusCode": 200
    },
    "referrer-policy": {
      "expectation": "referrer-policy-private",
      "pass": true,
      "result": "referrer-policy-private",
      "scoreModifier": 5,
      "data": "same-origin",
      "http": true,
      "meta": false
    },
    "strict-transport-security": {
      "expectation": "hsts-implemented-max-age-at-least-six-months",
      "pass": true,
      "result": "hsts-implemented-max-age-at-least-six-months",
      "scoreModifier": 0,
      "data": "max-age=15768000; includeSubDomains;",
      "includeSubDomains": true,
      "maxAge": 15768000,
      "preload": false,
      "preloaded": false
    },
    "subresource-integrity": {
      "expectation": "sri-implemented-and-external-scripts-loaded-securely",
      "pass": true,
      "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin",
      "scoreModifier": 0,
      "data": {}
    },
    "x-content-type-options": {
      "expectation": "x-content-type-options-nosniff",
      "pass": true,
      "result": "x-content-type-options-nosniff",
      "scoreModifier": 0,
      "data": "nosniff"
    },
    "x-frame-options": {
      "expectation": "x-frame-options-sameorigin-or-deny",
      "pass": true,
      "result": "x-frame-options-implemented-via-csp",
      "scoreModifier": 5,
      "data": null
    },
    "cross-origin-resource-policy": {
      "expectation": "corp-implemented-with-same-site",
      "pass": true,
      "result": "corp-not-implemented",
      "scoreModifier": 0,
      "data": null,
      "http": false,
      "meta": false
    }
  }
}