{
  "scan": {
    "algorithmVersion": 4,
    "grade": "B+",
    "error": null,
    "score": 80,
    "statusCode": 200,
    "testsFailed": 1,
    "testsPassed": 9,
    "testsQuantity": 10,
    "responseHeaders": {
      "content-security-policy": "style-src 'self' 'unsafe-inline';    font-src 'self';    object-src 'none';    base-uri 'self';    form-action 'self';",
      "referrer-policy": "strict-origin-when-cross-origin",
      "x-content-type-options": "nosniff",
      "vary": "RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Accept-Encoding, Origin",
      "link": "</_next/static/media/313510e2713fb214-s.p.woff2>; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", </_next/static/media/e4af272ccee01ff0-s.p.woff2>; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", </_next/static/css/5b576904c612405e.css>; rel=preload; as=\"style\", </_next/static/css/fbb7cf2b0e5b10a9.css>; rel=preload; as=\"style\", </_next/static/css/5a30196453122a98.css>; rel=preload; as=\"style\"",
      "x-powered-by": "Next.js",
      "cache-control": "private, no-cache, no-store, max-age=0, must-revalidate",
      "content-type": "text/html; charset=utf-8",
      "date": "Fri, 04 Jul 2025 04:56:29 GMT",
      "transfer-encoding": "chunked",
      "server": "HTTPS",
      "x-frame-options": "SAMEORIGIN",
      "access-control-allow-headers": "Authorization, Content-Type, content-type",
      "permissions-policy": "accelerometer=(), autoplay=(), camera=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), sync-xhr=(self), usb=(), web-share=()",
      "strict-transport-security": "max-age=15780000;",
      "connection": "close"
    }
  },
  "tests": {
    "content-security-policy": {
      "expectation": "csp-implemented-with-no-unsafe",
      "pass": false,
      "result": "csp-implemented-with-unsafe-inline",
      "scoreModifier": -20,
      "data": {
        "style-src": [
          "'self'",
          "'unsafe-inline'"
        ],
        "font-src": [
          "'self'"
        ],
        "object-src": [
          "'none'"
        ],
        "base-uri": [
          "'self'"
        ],
        "form-action": [
          "'self'"
        ]
      },
      "http": true,
      "meta": false,
      "policy": {
        "antiClickjacking": false,
        "defaultNone": false,
        "insecureBaseUri": false,
        "insecureFormAction": false,
        "insecureSchemeActive": false,
        "insecureSchemePassive": false,
        "strictDynamic": false,
        "unsafeEval": false,
        "unsafeInline": true,
        "unsafeInlineStyle": true,
        "unsafeObjects": false
      },
      "numPolicies": 1
    },
    "cookies": {
      "expectation": "cookies-secure-with-httponly-sessions",
      "pass": true,
      "result": "cookies-not-found",
      "scoreModifier": 0,
      "data": null,
      "sameSite": false
    },
    "cross-origin-resource-sharing": {
      "expectation": "cross-origin-resource-sharing-not-implemented",
      "pass": true,
      "result": "cross-origin-resource-sharing-not-implemented",
      "scoreModifier": 0,
      "data": null
    },
    "redirection": {
      "expectation": "redirection-to-https",
      "pass": true,
      "result": "redirection-to-https",
      "scoreModifier": 0,
      "destination": "https://gptlab.eea.europa.eu/auth/login?next=%2Fchat",
      "redirects": true,
      "route": [
        "http://gptlab.eea.europa.eu/",
        "https://gptlab.eea.europa.eu/",
        "https://gptlab.eea.europa.eu/chat",
        "https://gptlab.eea.europa.eu/auth/login?next=%2Fchat"
      ],
      "statusCode": 200
    },
    "referrer-policy": {
      "expectation": "referrer-policy-private",
      "pass": true,
      "result": "referrer-policy-private",
      "scoreModifier": 5,
      "data": "strict-origin-when-cross-origin",
      "http": true,
      "meta": false
    },
    "strict-transport-security": {
      "expectation": "hsts-implemented-max-age-at-least-six-months",
      "pass": true,
      "result": "hsts-implemented-max-age-at-least-six-months",
      "scoreModifier": 0,
      "data": "max-age=15780000;",
      "includeSubDomains": false,
      "maxAge": 15780000,
      "preload": false,
      "preloaded": false
    },
    "subresource-integrity": {
      "expectation": "sri-implemented-and-external-scripts-loaded-securely",
      "pass": true,
      "result": "sri-not-implemented-but-all-scripts-loaded-from-secure-origin",
      "scoreModifier": 0,
      "data": {}
    },
    "x-content-type-options": {
      "expectation": "x-content-type-options-nosniff",
      "pass": true,
      "result": "x-content-type-options-nosniff",
      "scoreModifier": 0,
      "data": "nosniff"
    },
    "x-frame-options": {
      "expectation": "x-frame-options-sameorigin-or-deny",
      "pass": true,
      "result": "x-frame-options-sameorigin-or-deny",
      "scoreModifier": 0,
      "data": "SAMEORIGIN"
    },
    "cross-origin-resource-policy": {
      "expectation": "corp-implemented-with-same-site",
      "pass": true,
      "result": "corp-not-implemented",
      "scoreModifier": 0,
      "data": null,
      "http": false,
      "meta": false
    }
  }
}