{ "scan": { "algorithmVersion": 5, "grade": "A+", "error": null, "score": 120, "statusCode": 200, "testsFailed": 0, "testsPassed": 10, "testsQuantity": 10, "responseHeaders": { "date": "Fri, 24 Jul 2026 07:00:32 GMT", "content-type": "text/html; charset=utf-8", "transfer-encoding": "chunked", "connection": "close", "accept-ranges": "bytes", "age": "45", "content-security-policy": "default-src https: data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:; child-src 'self' blob:; connect-src https: data:; frame-src http: data:; upgrade-insecure-requests, default-src 'self'; object-src 'self'; base-uri 'self'; form-action 'self'; connect-src 'self' blob: https://globalland.vito.be https://api.friendlycaptcha.com/ https://cryo.land.copernicus.eu/ https://copernicus.discomap.eea.europa.eu/ https://servicios.idee.es/ https://phenology.vgt.vito.be/ https://public.tableau.com/ https://sh.dataspace.copernicus.eu/ https://mapserver.dataspace.copernicus.eu/ https://gisco-services.ec.europa.eu/ https://s3-eu-west-1.amazonaws.com/ https://geoserver.geoville.com/ https://geoserver.vlcc.geoville.com https://clms-prod.eea.europa.eu https://land.copernicus.eu https://*.eea.europa.eu https://cdn.arcgis.com/ https://www.arcgis.com/ https://utility.arcgisonline.com/ https://js.arcgis.com/ https://services.arcgisonline.com https://services.arcgis.com https://static.arcgis.com https://basemaps.arcgis.com/ https://*.arcgis.com/ https://*.eionet.europa.eu http://*.eea.europa.eu https://*.land.copernicus.eu https://cloudferro.sentinel-hub.com https://geospatial.jrc.ec.europa.eu https://image.discomap.eea.europa.eu; font-src 'self' data: https://cdn.arcgis.com/ https://js.arcgis.com/ https://fonts.gstatic.com/ https://*.eea.europa.eu https://*.eionet.europa.eu https://land.copernicus.eu https://*.land.copernicus.eu; frame-src 'self' https://europa.eu/ https://*.europa.eu/ https://*.eea.europa.eu https://*.eionet.europa.eu http://*.eea.europa.eu https://eea.maps.arcgis.com/ https://land.copernicus.eu https://*.land.copernicus.eu https://www.youtube.com https://youtube.com; img-src 'self' data: blob: https://*.s3.amazonaws.com https:; script-src 'self' 'nonce-W0Scrp60MM7O972qF/vX4A==' 'unsafe-inline' 'unsafe-eval' blob: data: https://matomo.eea.europa.eu https://js.arcgis.com/ https://services.arcgis.com https://*.eea.europa.eu https://*.eionet.europa.eu http://*.eea.europa.eu https://cdnjs.cloudflare.com https://land.copernicus.eu https://*.land.copernicus.eu https://public.tableau.com; frame-ancestors 'self' *.europa.eu *.eionet.europa.eu *.eea.europa.eu *.discomap.eea.europa.eu https://eu-space.europa.eu/; media-src https://*.eea.europa.eu; style-src 'self' 'unsafe-inline' https://js.arcgis.com/ https://*.eionet.europa.eu https://*.eea.europa.eu https://cdnjs.cloudflare.com; report-uri https://sentry.eea.europa.eu/api/28/security/?sentry_key=6afdc4d9e7a148509fa0841b0e58a958;", "etag": "W/\"f2ec0-07afOubQ9V7QD0eZuBPvPObrtKM-gzip\"", "grace": "", "vary": "Accept-Encoding", "via": "1.1 clms-frontend-dpl-varnish-7b9b8d4f78-dlfrh (Varnish/7.7)", "x-backend": "cluster(frontend-volto:(null))", "x-backend-name": "cluster(10.43.12.191:3000)", "x-cache": "HIT", "x-cacheable": "YES", "x-content-type-options": "nosniff", "x-url": "/en", "x-varnish": "101744 5146506", "x-xss-protection": "\"1; mode=block\"", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "server": "HTTPS", "expect-ct": "max-age=604800, report-uri='https://sentry.eea.europa.eu/api/45/security/?sentry_key=0343e20fc4e0469790b6016561f032e3'", "x-frame-options": "'SAMEORIGIN'", "referrer-policy": "strict-origin-when-cross-origin", "access-control-allow-headers": "Authorization, Content-Type, content-type", "permissions-policy": "accelerometer=(), autoplay=(), camera=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), sync-xhr=(self), usb=()" } }, "tests": { "content-security-policy": { "expectation": "csp-implemented-with-no-unsafe", "pass": true, "result": "csp-implemented-with-no-unsafe-default-src-none", "scoreModifier": 10, "data": { "default-src": [ "'none'" ], "worker-src": [ "'self'", "blob:" ], "child-src": [ "'self'", "blob:" ], "connect-src": [ "'none'" ], "frame-src": [ "'none'" ], "upgrade-insecure-requests": [ "'none'" ], "object-src": [ "'none'" ], "base-uri": [ "'none'" ], "form-action": [ "'none'" ], "font-src": [ "'none'" ], "img-src": [ "'none'" ], "script-src": [ "'none'" ], "frame-ancestors": [ "'none'" ], "media-src": [ "'none'" ], "style-src": [ "'none'" ], "report-uri": [ "'none'" ] }, "http": true, "meta": false, "policy": { "antiClickjacking": true, "defaultNone": true, "insecureBaseUri": false, "insecureFormAction": false, "insecureSchemeActive": false, "insecureSchemePassive": false, "strictDynamic": false, "unsafeEval": false, "unsafeInline": false, "unsafeInlineStyle": false, "unsafeObjects": false }, "numPolicies": 2 }, "cookies": { "expectation": "cookies-secure-with-httponly-sessions", "pass": true, "result": "cookies-not-found", "scoreModifier": 0, "data": null, "sameSite": false }, "cross-origin-resource-sharing": { "expectation": "cross-origin-resource-sharing-not-implemented", "pass": true, "result": "cross-origin-resource-sharing-not-implemented", "scoreModifier": 0, "data": null }, "redirection": { "expectation": "redirection-to-https", "pass": true, "result": "redirection-to-https", "scoreModifier": 0, "destination": "https://clms-staging.eea.europa.eu/en", "redirects": true, "route": [ "http://clms-staging.eea.europa.eu/", "https://clms-staging.eea.europa.eu/", "https://clms-staging.eea.europa.eu/en" ], "statusCode": 200 }, "referrer-policy": { "expectation": "referrer-policy-private", "pass": true, "result": "referrer-policy-private", "scoreModifier": 5, "data": "strict-origin-when-cross-origin", "http": true, "meta": false }, "strict-transport-security": { "expectation": "hsts-implemented-max-age-at-least-six-months", "pass": true, "result": "hsts-implemented-max-age-at-least-six-months", "scoreModifier": 0, "data": "max-age=31536000; includeSubDomains; preload", "includeSubDomains": true, "maxAge": 31536000, "preload": true, "preloaded": false }, "subresource-integrity": { "expectation": "sri-implemented-and-external-scripts-loaded-securely", "pass": true, "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin", "scoreModifier": 0, "data": {} }, "x-content-type-options": { "expectation": "x-content-type-options-nosniff", "pass": true, "result": "x-content-type-options-nosniff", "scoreModifier": 0, "data": "nosniff" }, "x-frame-options": { "expectation": "x-frame-options-sameorigin-or-deny", "pass": true, "result": "x-frame-options-implemented-via-csp", "scoreModifier": 5, "data": "'SAMEORIGIN'" }, "cross-origin-resource-policy": { "expectation": "corp-implemented-with-same-site", "pass": true, "result": "corp-not-implemented", "scoreModifier": 0, "data": null, "http": false, "meta": false } } }