elior-schools.com

HTML metadata

Title: Elior School Dining
Description: At Elior School Dining, we provide thousands of meals every day for schools. We are one of Elior North America companies that are united by our passion for food, service and excellence. Great school days start in the kitchen! The days are brighter with easy and delicious ways to eat at school. Mealtime is where we shine!
Language: en
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://www.elior-schools.com/

Technology

Server: Apache
CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (3)

cdn.jsdelivr.net×1
www.googletagmanager.com×1
www.youtube.com×1

Social

Registration

Registrar

Nameshield SAS

Created

2025-05-02

Expires

2027-05-02 347 days left

Updated

2025-11-18

Name servers

nsa.perf1.fr
nsb.perf1.com
nsc.perf1.com

DNS records live

NS

nsa.perf1.fr
nsb.perf1.com
nsc.perf1.com

MX

10 custmx.cscdns.net

TXT

google-site-verification=9sF18Ad99aTvUgwFxgCb1yg3pu0hcpDj0rbqct6ZzVM

Certificate (current)

E8

from 2026-04-27 to 2026-07-26

Expires in 68 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.elior-schools.com/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), microphone=(), camera=(), payment=()
x-content-type-options: nosniff, nosniff
content-security-policy: object-src 'none'; script-src 'self' 'report-sample' 'unsafe-eval' https://www.googletagmanager.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com https://www.youtube.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://kit.fontawesome.com https://unpkg.com https://connect.facebook.net https://www.youtube.com https://js-eu1.hsforms.net https://js-eu1.hs-scripts.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.google.com; style-src 'self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'report-sample' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://cdn.jsdelivr.net https://cdnjs
strict-transport-security: max-age=63072000; preload;
content-security-policy-report-only: object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com https://www.youtube.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://kit.fontawesome.com https://unpkg.com https://connect.facebook.net https://www.youtube.com https://js-eu1.hsforms.net https://js-eu1.hs-scripts.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.google.com; style-src 'self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'report-sample' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://cdn.jsdelivr.n

Links to (1)

linkedin.com×1

Linked from (1)

elior-na.com×2