Domain History
jung.ee
Grade A+ · 100/100 · 6/6 security headers present
Security Score
A+
100/ 100
Security Headers
6/ 6
CSP Violations
NoViolations
Issues Found
0Issues
Recommendations
0Available
CSP Analysis
Content Security PolicyHIGH
default-src 'unsafe-inline' https: https://www.jung-group.com; script-src 'unsafe-inline' 'unsafe-eval' https: https://www.jung-group.com; object-src 'unsafe-inline' https://*.mollie.com; style-src 'unsafe-inline' https:; img-src data: https:; font-src data: https:; frame-src https://www.jung-group.com https://*.jung.de https://*.jung-group.cn https://*.jung-group.com https://scnem3.com https://*.mollie.com blob: https://*.arviewer.jung.de https://*.cms-assets.jung.de https://*.cms.jung.de https://*.downloads.jung.de https://*.jung.app https://*.jung.de https://*.jung.ee https://*.jung.es https://*.jung.lt https://*.jung-russia.ru https://*.jung.ua https://*.m.jung.de https://*.musterkoffer.jung.de https://*.qr.jung.de https://*.service.jung.de https://*.smarthome.jung.de https://*.software.jung.de https://*.jung.be https://*.jungcontrols.com https://*.mein-elektroinstallateur.de https://*.youtube.com https://www.youtube-nocookie.com https://player.podigee-cdn.net https://scnem3.com https://*.pay1.de https://*.paypal.com https://*.paypalobjects.com https://*.archlabtransfer.de https://*.partcommunity.com https://*.jung-group.cn https://planung.fs-conf3-jung-qm.p14.de https://planung.konfigurator.jung.de https://planung.jung.de https://planung.jung-group.com https://*.mypurecloud.de https://*.nr-data.net https://shyrka-prod-euc1.s3.eu-central-1.amazonaws.com https://*.newrelic.com https://jung.canto.de https://d30qymu4o00meq.cloudfront.net https://*.cloudfront.net https://canto.us1app.churnzero.net https://embeds.beehiiv.com https://*.euc1.pure.cloud wss://*.mypurecloud.de wss://*.euc1.pure.cloud https://digital.jung-group.com https://digital.jung-group.com/de/knx-configurator https://digital.jung-group.com/de/home-configurator https://digital.jung-group.com/de/switch-configurator https://jung-configurator.canvaslogic.tech https://www.googletagmanager.com https://productimages.jung-group.com https://default-german-bucket-staging.s3-accelerate.amazonaws.com https://default-german-bucket-staging-public.s3-accelerate.amazonaws.com https://default-german-bucket.s3.eu-central-1.amazonaws.com https://oauth.canto.de https://jung.sw.localhost; frame-ancestors 'self' https://www.jung-group.com https://jung.canto.de
Directive Analysis
default-srcHIGH
https: https://www.jung-group.com 'unsafe-inline'
•Unsafe inline execution allowed in default-src
•Missing recommended values for default-src: self
script-srcHIGH
https: https://www.jung-group.com 'unsafe-eval' 'unsafe-inline'
•Unsafe eval() execution allowed in script-src
•Unsafe inline execution allowed in script-src
•Missing recommended values for script-src: sha256-, self, sha512-, nonce-, sha384-
•No nonces or hashes used for script-src
object-srcHIGH
https://*.mollie.com 'unsafe-inline'
•Unsafe inline execution allowed in object-src
•Missing recommended values for object-src: none
style-srcHIGH
https: 'unsafe-inline'
•Unsafe inline execution allowed in style-src
•Missing recommended values for style-src: sha256-, self, sha512-, nonce-, sha384-
img-srcLOW
https: data:
•Missing recommended values for img-src: self
font-srcLOW
https: data:
•Missing recommended values for font-src: self
frame-srcLOW
https://*.cms-assets.jung.de https://player.podigee-cdn.net https://*.mypurecloud.de https://www.youtube-nocookie.com https://*.mein-elektroinstallateur.de https://*.qr.jung.de https://*.paypalobjects.com https://d30qymu4o00meq.cloudfront.net https://www.jung-group.com https://*.jung-russia.ru https://*.m.jung.de https://www.googletagmanager.com https://digital.jung-group.com https://*.jung.ua https://*.youtube.com https://*.partcommunity.com https://*.jung.ee https://planung.fs-conf3-jung-qm.p14.de https://jung-configurator.canvaslogic.tech https://*.mollie.com https://*.cloudfront.net https://*.paypal.com https://digital.jung-group.com/de/home-configurator https://*.downloads.jung.de https://jung.canto.de https://*.musterkoffer.jung.de https://*.archlabtransfer.de https://*.nr-data.net https://*.jung.app https://default-german-bucket-staging-public.s3-accelerate.amazonaws.com https://planung.konfigurator.jung.de https://planung.jung-group.com wss://*.mypurecloud.de https://planung.jung.de https://shyrka-prod-euc1.s3.eu-central-1.amazonaws.com https://canto.us1app.churnzero.net wss://*.euc1.pure.cloud https://*.jung.es https://embeds.beehiiv.com https://default-german-bucket.s3.eu-central-1.amazonaws.com https://scnem3.com https://default-german-bucket-staging.s3-accelerate.amazonaws.com https://*.cms.jung.de https://*.smarthome.jung.de https://productimages.jung-group.com https://digital.jung-group.com/de/switch-configurator https://*.pay1.de https://*.jung-group.com https://jung.sw.localhost https://oauth.canto.de https://*.jung-group.cn https://*.jungcontrols.com https://*.euc1.pure.cloud https://*.jung.de https://*.jung.lt https://*.software.jung.de https://*.service.jung.de https://*.jung.be https://*.newrelic.com https://*.arviewer.jung.de https://digital.jung-group.com/de/knx-configurator blob:
•Missing recommended values for frame-src: self
frame-ancestorsLOW
https://www.jung-group.com https://jung.canto.de 'self'
•Missing recommended values for frame-ancestors: self, none
Security Headers
✓Permissions-PolicyPresent
autoplay=(), camera=(), geolocation=(), microphone=(), midi=()
Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.
✓Referrer-PolicyPresent
strict-origin-when-cross-origin, same-origin
Controls how much referrer information is sent with requests, preventing data leaks to third parties.
✓Strict-Transport-SecurityPresent
max-age=31536000; includeSubDomains, max-age=15768000
Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.
✓X-Content-Type-OptionsPresent
nosniff, nosniff
Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.
✓X-Frame-OptionsPresent
deny, SAMEORIGIN
Prevents the page from being embedded in iframes, protecting against clickjacking attacks.
✓X-XSS-ProtectionPresent
1; mode=block
Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.
Beyond headers: infrastructure exposure
via OSN, our sister projectSecurity headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.
See what the internet sees about jung.eeWeak headers often come with other exposure — check the full picture.
See full exposure report on OSN →Free, no signup.
jung.ee
3 scans since 7/18/2025
A+
Latest: 100/100
Total Scans
3
Latest Score
100/100
First Scan
7/18/2025
Last Scan
7/18/2025
Score Trend
Security score progression over 2 scans
Show off your security grade
Embed this badge on your site or README. It updates automatically after each scan and links back to this report.
HTML
<a href="https://headertest.com/results/jung.ee" title="Security headers grade for jung.ee — HeaderTest">
<img src="https://headertest.com/api/badge/jung.ee" alt="HeaderTest security grade: A+ (100/100) for jung.ee" />
</a>Markdown
[](https://headertest.com/results/jung.ee)