content-security-policy

Content Security Policy (CSP) header not implemented

cookies

All cookies use the Secure flag, session cookies use the HttpOnly flag, and cross-origin restrictions are in place via the SameSite flag

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) header set to SAMEORIGIN or DENY

x-xss-protection

Deprecated X-XSS-Protection header not implemented

Diagnostics

Metrics

_gid

_ga_JT389QYW8X

_gat

pll_language

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.

WordPress

MySQL is an open-source relational database management system.

MySQL

PHP is a general-purpose scripting language used for web development.

Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.

Bootstrap

The Events Calendar is a free event management plugin for WordPress.

The Events Calendar

Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.

Contact Form 7

Polylang is a WordPress plugin which allows you to create multilingual WordPress site.

Polylang

Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.

Google Hosted Libraries

Modernizr is a JavaScript library that detects the features available in a user's browser.

Modernizr

Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.

Lodash

jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.

jQuery UI

Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.

jQuery Migrate

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jQuery

Isotope.js is a JavaScript library that makes it easy to sort, filter, and add Masonry layouts to items on a webpage.

Isotope

Google Analytics is a free web analytics service that tracks and reports website traffic.

Google Analytics

Google Font API is a web service that supports open-source font files that can be used on your web designs.

Google Font API

Font Awesome is a font and icon toolkit based on CSS and Less.

Font Awesome

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

RSS is a family of web feed formats used to publish frequently updated works—such as blog entries, news headlines, audio, and video—in a standardized format.

Open Graph is a protocol that is used to integrate any web page into the social graph.

name	domain	httpOnly	secure
_gid	.sante.fr	❌	❌
_ga	.sante.fr	❌	❌
_ga_JT389QYW8X	.sante.fr	❌	❌
_gat	.sante.fr	❌	❌
pll_language	cns.sante.fr	❌	✔️

type	url	details
google fonts	fonts.googleapis.com/css?...	Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/
google fonts	fonts.googleapis.com/css?...	Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/
google	ajax.googleapis.com/ajax/...	Use hosted Matomo instance
google analytics	www.google-analytics.com/...	Use hosted Matomo instance
google fonts	fonts.gstatic.com/s/opens...	Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/
google fonts	fonts.gstatic.com/s/opens...	Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/
google fonts	fonts.googleapis.com/css?...	Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/
google analytics	www.google-analytics.com/...	Use hosted Matomo instance
google fonts	fonts.gstatic.com/s/ralew...	Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/
google tag manager	www.googletagmanager.com/...	Use hosted Matomo instance
google fonts	fonts.gstatic.com/s/ralew...	Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/
google analytics	www.google-analytics.com/...	Use hosted Matomo instance

flag	country	hostname	ip	city
	France	cns.sante.fr	185.194.81.38	?
	États Unis	fonts.googleapis.com	142.250.189.234	?
	États Unis	ajax.googleapis.com	172.217.12.106	?
	États Unis	www.google-analytics.com	216.239.34.178	?
	États Unis	fonts.gstatic.com	142.250.191.35	?
	États Unis	www.googletagmanager.com	142.251.32.40	?

https://cns.sante.fr

LightHouse

https://cns.sante.fr/environ 6 heures

Cookiesenviron 6 heures

Scripts tiersenviron 6 heures

Déclaration de mise en accessibilité

non-conforme