content-security-policy

Content Security Policy (CSP) implemented with unsafe sources inside style-src. This includes 'unsafe-inline', data: or overly broad sources such as https:.

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

public-key-pinning

HTTP Public Key Pinning (HPKP) header not implemented

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) header set to SAMEORIGIN or DENY

x-xss-protection

X-XSS-Protection header set to "1; mode=block"

default-src 'none'; connect-src 'self' https://*.gouv.fr; font-src 'self'; img-src 'self'; prefetch-src 'self' https://*.gouv.fr; script-src 'self' https://*.gouv.fr; frame-src 'self' https://*.gouv.fr; style-src 'self' 'unsafe-inline'

Diagnostics

Metrics

http

_pk_ses.2.6321

_pk_id.2.6321

Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.

Node.js

Next.js is a React framework for developing single page Javascript applications.

Next.js

Styled components is a CSS-in-JS styling framework that uses tagged template literals in JavaScript.

styled-components

React is an open-source JavaScript library for building user interfaces or UI components.

React

Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.

Azure

Matomo Analytics is a free and open-source web analytics application, that runs on a PHP/MySQL web-server.

Matomo Analytics

core-js is a modular standard library for JavaScript, with polyfills for cutting-edge ECMAScript features.

core-js

The web-vitals JavaScript is a tiny, modular library for measuring all the web vitals metrics on real users.

web-vitals

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

Cookies	Domaine	HTTP Only	Secure
_pk_ses.2.6321	www.fabrique.social.gouv.fr	❌	❌
_pk_id.2.6321	www.fabrique.social.gouv.fr	❌	❌

https://www.fabrique.social.gouv.fr

LightHouse

https://www.fabrique.social.gouv.fr/

Eco-index

GES: 2.24 gramme(s) par visite

Eau : 3.36 cl par visite

Ça veut dire quoi ?

Scripts tiers et cookies

Déclaration de mise en accessibilité

Erreurs 404

URL
https://www.fabrique.social.gouv.fr/startups/code-du-travail-numerique/kickoff/genese
https://www.fabrique.social.gouv.fr/faq/beta.gouv.fr
https://www.fabrique.social.gouv.fr/startups/enfants-du-spectacle/
https://www.fabrique.social.gouv.fr/startups/transition-collective/
https://www.fabrique.social.gouv.fr/startups/Domifa/
https://www.fabrique.social.gouv.fr/feed.xml
https://www.fabrique.social.gouv.fr/startups/code-du-travail-numerique/sdr
https://www.fabrique.social.gouv.fr/startups/ramses/