content-security-policy

Content Security Policy (CSP) header not implemented

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

All cookies use the Secure flag and all session cookies use the HttpOnly flag

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS

x-content-type-options

X-Content-Type-Options header cannot be recognized

x-frame-options

X-Frame-Options (XFO) header not implemented

x-xss-protection

Deprecated X-XSS-Protection header not implemented

Diagnostics

Metrics

BIGipServerpool-dgefp-pa-v2-prod.cegedim.cloud-HTTP

Drupal is a free and open-source web content management framework.

Drupal

PHP is a general-purpose scripting language used for web development.

Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.

Firebase

Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.

Bootstrap

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

Cloudflare

cdnjs is a free distributed JS library delivery service.

cdnjs

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jQuery

reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.

reCAPTCHA

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

Open Graph is a protocol that is used to integrate any web page into the social graph.

name	domain	httpOnly	secure
BIGipServerpool-dgefp-pa-v2-prod.cegedim.cloud-HTTP	alternance.emploi.gouv.fr	✔️	✔️

type	url	details
cloudflare	cdnjs.cloudflare.com/ajax...	Host files locally

flag	country	hostname	ip	city
	France	alternance.emploi.gouv.fr	185.194.82.123	?
	?	cdnjs.cloudflare.com	104.17.25.14	?

https://alternance.emploi.gouv.fr

LightHouse

https://alternance.emploi.gouv.fr/environ 6 heures

Cookiesenviron 19 heures

Scripts tiersenviron 19 heures

Déclaration de mise en accessibilité