elior-collegiatedining.com

HTML metadata

Title: Elior Collegiate Dining
Description: Fueling college students, community and culture. Food is at the center of the college experience and Elior Collegiate Dining’s mission is to provide the best possible dining experience for every student.
Language: en
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://www.elior-collegiatedining.com/

Technology

Server: Apache
CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (3)

cdn.jsdelivr.net×1
www.googletagmanager.com×1
www.youtube.com×1

Social

Registration

Registrar

Nameshield SAS

Created

2025-05-06

Expires

2027-05-06 350 days left

Updated

2025-11-18

Name servers

nsa.perf1.fr
nsb.perf1.com
nsc.perf1.com

DNS records live

NS

nsa.perf1.fr
nsb.perf1.com
nsc.perf1.com

MX

10 custmx.cscdns.net

Verified for

Google

Certificate (current)

E7

from 2026-04-27 to 2026-07-26

Expires in 67 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.elior-collegiatedining.com/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), microphone=(), camera=(), payment=()
x-content-type-options: nosniff, nosniff
content-security-policy: object-src 'none'; script-src 'self' 'report-sample' 'unsafe-eval' https://www.googletagmanager.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com https://www.youtube.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://kit.fontawesome.com https://unpkg.com https://connect.facebook.net https://js-eu1.hsforms.net https://js-eu1.hs-scripts.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.google.com https://www.youtube.com; style-src 'self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'report-sample' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://cdn.jsdelivr.net https://cdnjs
strict-transport-security: max-age=63072000; preload;
content-security-policy-report-only: object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com https://www.youtube.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://kit.fontawesome.com https://unpkg.com https://connect.facebook.net https://js-eu1.hsforms.net https://js-eu1.hs-scripts.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.google.com https://www.youtube.com; style-src 'self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'report-sample' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://cdn.jsdelivr.n

Links to (3)

Linked from (1)

elior-na.com×2