swisscovery.ch
HTML metadata
Technology
- Stack
- Java
DNS records live
- NS
-
- nsany1.infomaniak.com
- nsany2.infomaniak.com
- MX
-
- 5 mta-gw.infomaniak.ch
Email authentication partial
- SPF
-
v=spf1 ip4:192.254.125.107 ip4:159.183.231.179 include:spf.infomaniak.ch include:spf-eu.exlibrisgroup.com -allstrict (-all) - DMARC
-
v=DMARC1; p=none;policy: none (monitoring only) - DKIM
-
- s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WEIBvktOHXk+iJw9+KZzINmheJtsP17gtgzRSorU5M3qx4XqG7J7VYIqJUkRlHomg2Vxwc1/w852yEWmk… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDzuh8r7iKlieeG7nLC8KzA+9bAjy/EsIE6XV1eXhXZg3W4iKPN7mOH/waspk4deDMSJLKFBqndJzOzLtmiZNNs28…
selectors probed - s1:
Certificate (current)
R12
Expires in 85 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
object-src blob: 'self' *.exlibrisgroup.com *.exlibrisgroup.com.cn www.google-analytics.com stats.g.doubleclick.net s3.amazonaws.com www.youtube.com youtube.com *.contentdm.oclc.org iiif.nlm.nih.gov swisscovery.slsp.ch swisscovery.ch ;worker-src blob: 'self' *.exlibrisgroup.com *.exlibrisgroup.com.cn www.google-analytics.com stats.g.doubleclick.net s3.amazonaws.com www.youtube.com youtube.com artic.contentdm.oclc.org swisscovery.slsp.ch swisscovery.ch ;upgrade-insecure-requests; report-uri /infra/CSPReportEndpoint.jsp; report-to csp-report-endpoint;- strict-transport-security
max-age=31536000; includeSubDomains