← All Results
Domain History

lidl.ee

Grade A · 80/100 · 4/6 security headers present

Security Score

A
80/ 100

Security Headers

4/ 6

CSP Violations

NoViolations

Issues Found

0Issues

Recommendations

0Available

CSP Analysis

Content Security PolicyHIGH
default-src 'self'  blob:  https://*.facebook.com  https://*.facebook.net  https://*.api.schwarz  https://*.assets.schwarz  https://*.batch.com  https://*.bing.com  https://bat.bing.net  https://*.cliplister.com  https://*.cookiebot.com  https://*.creativecdn.com  https://*.criteo.com  https://*.exactag.com  https://*.instana.io  https://*.kameleoon.com  https://*.kameleoon.eu  https://*.kameleoon.io  https://*.kampyle.com  https://*.leaflets.schwarz  https://*.lidl-flyer.com  https://*.lidl-shop.com  https://*.lidl.de  https://*.lidlplus.com  https://*.livebuy.io  https://*.medallia.eu  https://mycliplister.com  https://*.mycliplister.com  https://*.peakprotect.com  https://*.pingdom.net  https://*.virtualearth.net  https://asset.schwarz  https://bidswitch.net  https://cdn.cookielaw.org  https://*.clarity.ms  https://creativecdn.com  https://form.lidl.com  https://*.onetrust.com  https://lidl.de  https://lidl.media01.eu  https://*.google-analytics.com  https://region1.analytics.google.com  https://s.kelkoogroup.net  https://s.kk-resources.com  https://sdk.virtualearth.net  https://searchhub.io  https://sentry.int.secrz.com  https://spatial.virtualearth.net  https://*.doubleclick.net  https://test.formcycle.vdc.lidl  https://www.awin1.com  https://www.google.be  https://www.google.com  https://google.com  https://www.google.cz  https://www.google.nl  https://www.google.pl  https://www.google.sk  https://www.googleadservices.com  https://www.gstatic.com  https://youtube.com  https://*.youtube-nocookie.com  https://*.youtube.com  https://www.googletagmanager.com  https://lidlplusprod.blob.core.windows.net  https://upeimagesprd.blob.core.windows.net  https://lidlplusstorage.blob.core.windows.net  https://*.scon.schwarz  wss://endpoint-prod.scon.schwarz  https://*.simplesurance.com  'unsafe-inline'  https://*.adyen.com  https://*.lidl.ee  data:  https://csp.cre.lidl-shop.com; frame-src 'self'  https://*.facebook.com  https://*.facebook.net  https://*.cliplister.com  https://*.cookiebot.com  https://*.creativecdn.com  https://*.criteo.com  https://*.kameleoon.com  https://*.kameleoon.eu  https://*.kameleoon.io  https://*.kampyle.com  https://*.leaflets.schwarz  https://*.lidl-onlinenewsletter.de  https://*.lidl-shop.com  https://*.lidl.com  https://*.lidl.de  https://*.livebuy.io  https://*.medallia.eu  https://*.pingdom.net  https://balancechecks.tx-gate.com  https://bidswitch.net  https://creativecdn.com  https://form.lidl.com  https://forms-prod.enc-test.de/  https://ldl.viewer.cit-fusion.com  https://lidl.de  https://lidl.media01.eu  https://*.google-analytics.com  https://region1.analytics.google.com  https://searchhub.io  https://sentry.int.secrz.com  https://spatial.virtualearth.net  https://*.doubleclick.net  https://test.formcycle.vdc.lidl  https://www.awin1.com  https://www.google.com  https://www.googleadservices.com  https://www.gstatic.com  https://youtube.com  https://*.youtube-nocookie.com  https://*.youtube.com  https://www.googletagmanager.com  https://www.lidl-gewinnspiel.de  https://www.youtube.com  https://link.tink.com  https://manuals.sit-connect.com  'unsafe-inline'  https://*.adyen.com  https://lidleesti.adact.me  https://*.lidl.ee; img-src 'self'  blob:  https://*.facebook.com  https://*.facebook.net  https://*.360yield.com  https://*.addthis.com  https://*.adnxs.com  https://*.assets.schwarz  https://*.bing.com  https://*.cat-ret.assets.lidl  https://*.cdn.flavedo.io  https://*.cliplister.com  https://*.cookiebot.com  https://*.criteo.com  https://*.instana.io  https://*.kameleoon.com  https://*.kameleoon.eu  https://*.kameleoon.io  https://*.kampyle.com  https://*.leaflets.schwarz  https://*.lidl-flyer.com  https://*.lidl-onlinenewsletter.de  https://*.lidl-shop.com  https://*.lidl.de  https://*.lidlplus.com  https://*.livebuy.io  https://*.medallia.eu  https://*.mycliplister.com  https://*.retail.lidl.net  https://*.retail.vdc.lidl  https://*.searchhub.io  https://*.smartadserver.com  https://*.virtualearth.net  https://asset.schwarz  https://bidswitch.net  https://cdn.cookielaw.org  https://content.odj.cloud  https://*.clarity.ms  https://cm.adform.net  https://form.lidl.com  https://lidl.de  https://lidl.media01.eu  https://*.google-analytics.com  https://region1.analytics.google.com  https://size.lidl.com  https://s.kelkoogroup.net  https://searchhub.io  https://sentry.int.secrz.com  https://spatial.virtualearth.net  https://sync.targeting.unrulymedia.com  https://*.doubleclick.net  https://test.formcycle.vdc.lidl  https://www.adobe.com  https://www.awin1.com  https://cdn.flavedo.io  https://www.google.at  https://www.google.ba  https://www.google.be  https://www.google.bg  https://www.google.ch  https://www.google.co.uk  https://www.google.com  https://www.google.com.bd  https://www.google.com.tr  https://www.google.com.ua  https://www.google.cz  https://www.google.de  https://www.google.dk  https://www.google.es  https://www.google.fr  https://www.google.gr  https://www.google.hr  https://www.google.hu  https://www.google.ie  https://www.google.is  https://www.google.it  https://www.google.lt  https://www.google.lu  https://www.google.lv  https://www.google.md  https://www.google.nl  https://www.google.no  https://www.google.pl  https://www.google.pt  https://www.google.ro  https://www.google.rs  https://www.google.ru  https://www.google.se  https://www.google.sk  https://www.googleadservices.com  https://www.gstatic.com  https://www.lidl-shop.be  https://www.lidl-shop.cz  https://www.lidl-shop.nl  https://www.lidl-shop.sk  https://www.lidl-sklep.pl  https://www.w3.org  https://x.bidswitch.net  https://youtube.com  https://*.creativecdn.com  https://*.youtube.com  https://www.googletagmanager.com  https://lidlplusprod.blob.core.windows.net  https://lidl.media.schwarz  https://upeimagesprd.blob.core.windows.net  https://lidlplusstorage.blob.core.windows.net  https://c1.adform.net  https://ce.lijit.com  https://criteo-partners.tremorhub.com  https://*.teads.tv  https://dpm.demdex.net  https://e1.emxdgt.com  https://eb2.3lift.com  https://exchange.mediavine.com  https://hb.yahoo.net  https://id5-sync.com  https://jadserve.postrelease.com  https://matching.ivitrack.com  https://mycliplister.com  https://pixel.rubiconproject.com  https://*.casalemedia.com  https://sync-criteo.ads.yieldmo.com  https://sync.1rx.io  https://rt.udmserve.net  https://ssc-cms.33across.com  https://ads.yieldmo.com  https://s.seedtag.com  https://sync.go.sonobi.com  https://fast.nexx360.io  https://*.upe.schwarz  https://media.sit-connect.com  https://api.scon-assets.schwarz  'unsafe-inline'  https://*.adyen.com  https://*.lidl.ee  data:; object-src 'self'  https://*.facebook.com  https://*.facebook.net  https://*.batch.com  https://*.cookiebot.com  https://*.criteo.com  https://*.kameleoon.com  https://*.kameleoon.eu  https://*.kameleoon.io  https://*.leaflets.schwarz  https://*.lidl-shop.com  https://*.lidl.de  https://*.livebuy.io  https://asset.schwarz  https://bidswitch.net  https://form.lidl.com  https://lidl.de  https://lidl.media01.eu  https://*.google-analytics.com  https://region1.analytics.google.com  https://searchhub.io  https://sentry.int.secrz.com  https://spatial.virtualearth.net  https://test.formcycle.vdc.lidl  https://www.google.com  https://www.googleadservices.com  https://www.gstatic.com  https://youtube.com  https://*.youtube.com  https://www.googletagmanager.com  https://manuals.sit-connect.com  'unsafe-eval'; script-src 'self'  blob:  https://*.facebook.com  https://*.facebook.net  https://*.api.schwarz  https://*.batch.com  https://*.bing.com  https://*.cookiebot.com  https://*.creativecdn.com  https://*.criteo.com  https://*.exactag.com  https://*.instana.io  https://*.kameleoon.com  https://*.kameleoon.eu  https://*.kameleoon.io  https://*.kampyle.com  https://*.leaflets.schwarz  https://*.lidl-flyer.com  https://*.lidl-shop.com  https://*.lidl.com  https://*.lidl.de  https://*.livebuy.io  https://*.medallia.eu  https://mycliplister.com  https://*.mycliplister.com  https://*.peakprotect.com  https://*.pingdom.net  https://*.searchhub.io  https://*.virtualearth.net  https://adservice.google.com  https://asset.schwarz  https://bidswitch.net  https://cdn.cookielaw.org  https://*.clarity.ms  https://creativecdn.com  https://form.lidl.com  https://*.onetrust.com  https://lidl.de  https://lidl.media01.eu  https://*.google-analytics.com  https://region1.analytics.google.com  https://s.kk-resources.com  https://searchhub.io  https://sentry.int.secrz.com  https://spatial.virtualearth.net  https://*.doubleclick.net  https://test.formcycle.vdc.lidl  https://www.awin1.com  https://www.google.com  https://www.googleadservices.com  https://www.gstatic.com  https://youtube.com  https://*.youtube.com  https://www.googletagmanager.com  'unsafe-eval'  'unsafe-inline'  about:  https://localhost  https://*.adyen.com; style-src 'self'  https://*.bing.com  https://*.cookiebot.com  https://*.criteo.com  https://*.kameleoon.com  https://*.kameleoon.eu  https://*.kameleoon.io  https://*.kampyle.com  https://*.leaflets.schwarz  https://*.lidl-flyer.com  https://*.lidl-shop.com  https://*.lidl.de  https://*.medallia.eu  https://asset.schwarz  https://bidswitch.net  https://form.lidl.com  https://lidl.de  https://lidl.media01.eu  https://*.google-analytics.com  https://region1.analytics.google.com  https://sdk.virtualearth.net  https://searchhub.io  https://sentry.int.secrz.com  https://spatial.virtualearth.net  https://test.formcycle.vdc.lidl  https://www.google.com  https://www.googleadservices.com  https://www.gstatic.com  https://www.lidl-shop.be  https://www.lidl-shop.cz  https://www.lidl-shop.nl  https://www.lidl-shop.sk  https://www.lidl-sklep.pl  https://youtube.com  https://*.youtube.com  https://www.googletagmanager.com  'unsafe-inline'; frame-ancestors 'self'  https://*.lidl.com  https://*.livebuy.io; report-uri https://csp.cre.lidl-shop.com/csp/report; base-uri 'self'; form-action 'self'  https://*.facebook.com  https://*.facebook.net  https://accounts.lidl.com  https://survey.g.doubleclick.net  https://payments.lidlplus.com;
Directive Analysis
default-srcHIGH
https://*.assets.schwarz https://lidl.de https://*.simplesurance.com https://*.leaflets.schwarz https://region1.analytics.google.com https://*.criteo.com https://bat.bing.net https://lidlplusprod.blob.core.windows.net https://*.kampyle.com https://*.peakprotect.com https://upeimagesprd.blob.core.windows.net 'unsafe-inline' https://*.facebook.net 'self' https://*.bing.com wss://endpoint-prod.scon.schwarz https://*.exactag.com https://*.medallia.eu https://mycliplister.com https://searchhub.io blob: https://*.cliplister.com https://*.api.schwarz https://sentry.int.secrz.com https://*.adyen.com https://spatial.virtualearth.net https://*.youtube-nocookie.com https://*.lidl.ee https://*.livebuy.io https://s.kelkoogroup.net https://asset.schwarz https://www.google.be https://www.googletagmanager.com https://cdn.cookielaw.org https://youtube.com https://*.lidlplus.com data: https://*.facebook.com https://*.creativecdn.com https://creativecdn.com https://*.pingdom.net https://*.lidl-shop.com https://lidl.media01.eu https://www.awin1.com https://google.com https://form.lidl.com https://*.kameleoon.io https://*.lidl.de https://*.google-analytics.com https://*.youtube.com https://www.google.com https://csp.cre.lidl-shop.com https://*.instana.io https://*.batch.com https://www.gstatic.com https://*.scon.schwarz https://test.formcycle.vdc.lidl https://*.kameleoon.eu https://*.mycliplister.com https://*.virtualearth.net https://*.cookiebot.com https://*.lidl-flyer.com https://*.onetrust.com https://sdk.virtualearth.net https://bidswitch.net https://www.google.sk https://www.google.pl https://*.clarity.ms https://www.googleadservices.com https://www.google.nl https://*.doubleclick.net https://www.google.cz https://lidlplusstorage.blob.core.windows.net https://*.kameleoon.com https://s.kk-resources.com
•Unsafe inline execution allowed in default-src
•Missing recommended values for default-src: self
frame-srcHIGH
https://lidl.de https://*.leaflets.schwarz https://region1.analytics.google.com https://*.criteo.com 'unsafe-inline' https://*.kampyle.com https://forms-prod.enc-test.de/ https://*.facebook.net 'self' https://*.medallia.eu https://searchhub.io https://www.youtube.com https://*.lidl-onlinenewsletter.de https://link.tink.com https://*.cliplister.com https://sentry.int.secrz.com https://*.adyen.com https://spatial.virtualearth.net https://*.youtube-nocookie.com https://*.lidl.ee https://*.livebuy.io https://www.googletagmanager.com https://youtube.com https://*.facebook.com https://*.creativecdn.com https://creativecdn.com https://*.pingdom.net https://*.lidl-shop.com https://lidl.media01.eu https://www.awin1.com https://form.lidl.com https://*.kameleoon.io https://*.lidl.de https://*.google-analytics.com https://*.youtube.com https://ldl.viewer.cit-fusion.com https://www.google.com https://*.lidl.com https://www.lidl-gewinnspiel.de https://www.gstatic.com https://test.formcycle.vdc.lidl https://balancechecks.tx-gate.com https://*.kameleoon.eu https://*.cookiebot.com https://bidswitch.net https://www.googleadservices.com https://lidleesti.adact.me https://*.doubleclick.net https://manuals.sit-connect.com https://*.kameleoon.com
•Unsafe inline execution allowed in frame-src
•Missing recommended values for frame-src: self
img-srcHIGH
https://lidl.de https://eb2.3lift.com https://www.google.no https://www.google.md https://www.google.is https://searchhub.io https://mycliplister.com https://media.sit-connect.com https://criteo-partners.tremorhub.com https://*.retail.lidl.net https://api.scon-assets.schwarz https://www.lidl-shop.sk https://asset.schwarz https://*.lidlplus.com data: https://www.lidl-shop.be https://*.facebook.com https://*.creativecdn.com https://www.google.lt https://www.google.es https://lidl.media01.eu https://www.google.hu https://cdn.flavedo.io https://form.lidl.com https://*.lidl.de https://ssc-cms.33across.com https://www.google.com.tr https://www.google.fr https://www.gstatic.com https://www.google.ru https://*.mycliplister.com https://*.virtualearth.net https://www.google.se https://www.google.lu https://www.google.pl https://hb.yahoo.net https://c1.adform.net https://*.retail.vdc.lidl https://sync.targeting.unrulymedia.com https://*.assets.schwarz https://region1.analytics.google.com https://*.criteo.com https://*.360yield.com https://lidlplusprod.blob.core.windows.net https://*.kampyle.com 'unsafe-inline' https://www.lidl-shop.nl https://pixel.rubiconproject.com https://*.facebook.net https://www.google.at https://www.google.dk https://sentry.int.secrz.com https://*.adyen.com https://www.google.com.ua https://www.google.bg https://s.kelkoogroup.net https://www.google.ch https://dpm.demdex.net https://sync.1rx.io https://*.adnxs.com https://*.casalemedia.com https://www.awin1.com https://lidl.media.schwarz https://*.kameleoon.io https://*.google-analytics.com https://www.google.com https://sync-criteo.ads.yieldmo.com https://x.bidswitch.net https://*.kameleoon.eu https://*.cookiebot.com https://*.lidl-flyer.com https://ce.lijit.com https://size.lidl.com https://www.google.sk https://www.google.cz https://lidlplusstorage.blob.core.windows.net https://*.kameleoon.com https://www.adobe.com https://*.leaflets.schwarz https://www.google.ba https://exchange.mediavine.com https://ads.yieldmo.com https://www.lidl-sklep.pl https://*.bing.com https://*.medallia.eu blob: https://*.cliplister.com https://spatial.virtualearth.net https://content.odj.cloud https://*.livebuy.io https://www.google.com.bd https://*.cdn.flavedo.io https://www.google.hr https://fast.nexx360.io https://sync.go.sonobi.com https://www.w3.org https://*.teads.tv https://e1.emxdgt.com https://rt.udmserve.net https://bidswitch.net https://www.google.nl https://*.searchhub.io https://*.doubleclick.net https://www.google.co.uk https://cm.adform.net https://www.google.ro https://*.addthis.com https://*.cat-ret.assets.lidl https://upeimagesprd.blob.core.windows.net https://jadserve.postrelease.com https://matching.ivitrack.com 'self' https://www.google.it https://www.lidl-shop.cz https://www.google.de https://www.google.gr https://*.lidl-onlinenewsletter.de https://*.lidl.ee https://www.googletagmanager.com https://www.google.be https://cdn.cookielaw.org https://youtube.com https://*.upe.schwarz https://www.google.lv https://*.lidl-shop.com https://*.smartadserver.com https://www.google.ie https://www.google.pt https://*.youtube.com https://*.instana.io https://test.formcycle.vdc.lidl https://s.seedtag.com https://id5-sync.com https://*.clarity.ms https://www.googleadservices.com https://www.google.rs
•Unsafe inline execution allowed in img-src
•Missing recommended values for img-src: self
object-srcHIGH
https://lidl.de https://*.leaflets.schwarz https://region1.analytics.google.com https://*.criteo.com https://*.facebook.net 'self' https://searchhub.io https://sentry.int.secrz.com https://spatial.virtualearth.net https://*.livebuy.io https://www.googletagmanager.com https://asset.schwarz https://youtube.com https://*.facebook.com 'unsafe-eval' https://*.lidl-shop.com https://lidl.media01.eu https://form.lidl.com https://*.kameleoon.io https://*.lidl.de https://*.google-analytics.com https://*.youtube.com https://www.google.com https://*.batch.com https://www.gstatic.com https://test.formcycle.vdc.lidl https://*.kameleoon.eu https://*.cookiebot.com https://bidswitch.net https://www.googleadservices.com https://manuals.sit-connect.com https://*.kameleoon.com
•Unsafe eval() execution allowed in object-src
•Missing recommended values for object-src: none
script-srcHIGH
https://lidl.de https://*.leaflets.schwarz https://region1.analytics.google.com https://*.criteo.com 'unsafe-inline' https://*.kampyle.com https://*.peakprotect.com https://*.facebook.net 'self' https://*.bing.com https://*.exactag.com https://*.medallia.eu https://mycliplister.com https://searchhub.io blob: https://*.api.schwarz https://sentry.int.secrz.com https://*.adyen.com https://spatial.virtualearth.net https://*.livebuy.io https://www.googletagmanager.com https://asset.schwarz https://cdn.cookielaw.org https://youtube.com https://*.facebook.com https://*.creativecdn.com 'unsafe-eval' https://creativecdn.com https://*.pingdom.net https://*.lidl-shop.com https://lidl.media01.eu https://www.awin1.com about: https://form.lidl.com https://*.kameleoon.io https://*.lidl.de https://*.google-analytics.com https://*.youtube.com https://www.google.com https://*.instana.io https://*.lidl.com https://*.batch.com https://www.gstatic.com https://test.formcycle.vdc.lidl https://localhost https://*.kameleoon.eu https://*.mycliplister.com https://adservice.google.com https://*.virtualearth.net https://*.cookiebot.com https://*.lidl-flyer.com https://*.onetrust.com https://bidswitch.net https://*.clarity.ms https://www.googleadservices.com https://*.searchhub.io https://*.doubleclick.net https://*.kameleoon.com https://s.kk-resources.com
•Unsafe inline execution allowed in script-src
•Unsafe eval() execution allowed in script-src
•Missing recommended values for script-src: sha512-, sha384-, nonce-, sha256-, self
•No nonces or hashes used for script-src
style-srcHIGH
https://lidl.de https://*.leaflets.schwarz https://region1.analytics.google.com https://*.criteo.com 'unsafe-inline' https://*.kampyle.com https://www.lidl-shop.nl https://www.lidl-sklep.pl https://*.bing.com 'self' https://*.medallia.eu https://searchhub.io https://www.lidl-shop.cz https://sentry.int.secrz.com https://spatial.virtualearth.net https://www.lidl-shop.sk https://asset.schwarz https://www.googletagmanager.com https://youtube.com https://www.lidl-shop.be https://*.lidl-shop.com https://lidl.media01.eu https://form.lidl.com https://*.kameleoon.io https://*.lidl.de https://*.google-analytics.com https://*.youtube.com https://www.google.com https://www.gstatic.com https://test.formcycle.vdc.lidl https://*.kameleoon.eu https://*.cookiebot.com https://*.lidl-flyer.com https://sdk.virtualearth.net https://bidswitch.net https://www.googleadservices.com https://*.kameleoon.com
•Unsafe inline execution allowed in style-src
•Missing recommended values for style-src: sha512-, sha384-, nonce-, sha256-, self
frame-ancestorsLOW
https://*.livebuy.io 'self' https://*.lidl.com
•Missing recommended values for frame-ancestors: none, self
report-uriLOW
https://csp.cre.lidl-shop.com/csp/report
base-uriLOW
'self'
•Missing recommended values for base-uri: none, self
form-actionLOW
https://payments.lidlplus.com https://survey.g.doubleclick.net https://*.facebook.net 'self' https://*.facebook.com https://accounts.lidl.com
•Missing recommended values for form-action: self

Security Headers

✗Permissions-PolicyMissing

Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.

How to add it:

nginx
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
apache
Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set Permissions-Policy value
✗Referrer-PolicyMissing

Controls how much referrer information is sent with requests, preventing data leaks to third parties.

How to add it:

nginx
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
apache
Header always set Referrer-Policy "strict-origin-when-cross-origin"
cloudflare
Rules > Transform Rules > HTTP Response Header Modification > Set Referrer-Policy to "strict-origin-when-cross-origin"
✓Strict-Transport-SecurityPresent

max-age=63072000; includeSubDomains; preload

Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.

✓X-Content-Type-OptionsPresent

nosniff

Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.

✓X-Frame-OptionsPresent

SAMEORIGIN

Prevents the page from being embedded in iframes, protecting against clickjacking attacks.

✓X-XSS-ProtectionPresent

1; mode=block

Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.

2 recommended security headers are missing on lidl.ee.

Beyond headers: infrastructure exposure

via OSN, our sister project

Security headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.

See what the internet sees about lidl.eeWeak headers often come with other exposure — check the full picture.

lidl.ee

3 scans since 7/19/2025

A

Latest: 80/100

Total Scans

3

Latest Score

80/100

First Scan

7/19/2025

Last Scan

7/19/2025

Score Trend

Security score progression over 2 scans

Scan History

DateScoreCSPHeadersIssuesAction
Jul 19, 2025
A (80)
No
4/60View →
Jul 19, 2025
A (80)
No
4/60View →

Show off your security grade

Embed this badge on your site or README. It updates automatically after each scan and links back to this report.

HeaderTest security grade: A (80/100) for lidl.ee
HTML
<a href="https://headertest.com/results/lidl.ee" title="Security headers grade for lidl.ee — HeaderTest">
  <img src="https://headertest.com/api/badge/lidl.ee" alt="HeaderTest security grade: A (80/100) for lidl.ee" />
</a>
Markdown
[![HeaderTest security grade: A (80/100) for lidl.ee](https://headertest.com/api/badge/lidl.ee)](https://headertest.com/results/lidl.ee)