content-security-policy

Content Security Policy (CSP) header not implemented

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

All cookies use the Secure flag and all session cookies use the HttpOnly flag

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) header set to SAMEORIGIN or DENY

x-xss-protection

Deprecated X-XSS-Protection header not implemented

Diagnostics

Metrics

_ga_JT389QYW8X

BIGipServerpool-cns-portail2.cegedim.cloud-HTTP

_gid

_gat

pll_language

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.

WordPress

MySQL is an open-source relational database management system.

MySQL

PHP is a general-purpose scripting language used for web development.

Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.

Bootstrap

The Events Calendar is a free event management plugin for WordPress.

The Events Calendar

Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.

Contact Form 7

Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.

Yoast SEO

Polylang is a WordPress plugin which allows you to create multilingual WordPress site.

Polylang

Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.

Google Hosted Libraries

Modernizr is a JavaScript library that detects the features available in a user's browser.

Modernizr

Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.

Lodash

jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.

jQuery UI

Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.

jQuery Migrate

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jQuery

Isotope.js is a JavaScript library that makes it easy to sort, filter, and add Masonry layouts to items on a webpage.

Isotope

Google Analytics is a free web analytics service that tracks and reports website traffic.

Google Analytics

Google Font API is a web service that supports open-source font files that can be used on your web designs.

Google Font API

Font Awesome is a font and icon toolkit based on CSS and Less.

Font Awesome

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

RSS is a family of web feed formats used to publish frequently updated works—such as blog entries, news headlines, audio, and video—in a standardized format.

Open Graph is a protocol that is used to integrate any web page into the social graph.

name	domain	httpOnly	secure
_ga_JT389QYW8X	.sante.fr	❌	❌
BIGipServerpool-cns-portail2.cegedim.cloud-HTTP	cns.sante.fr	✔️	✔️
_gid	.sante.fr	❌	❌
_ga	.sante.fr	❌	❌
_gat	.sante.fr	❌	❌
pll_language	cns.sante.fr	❌	✔️

type	url	details
google fonts	fonts.googleapis.com/css?...	Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/
google fonts	fonts.googleapis.com/css?...	Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/
google	ajax.googleapis.com/ajax/...	Use hosted Matomo instance
google analytics	www.google-analytics.com/...	Use hosted Matomo instance
google fonts	fonts.gstatic.com/s/opens...	Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/
google fonts	fonts.googleapis.com/css?...	Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/
google fonts	fonts.gstatic.com/s/opens...	Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/
google analytics	www.google-analytics.com/...	Use hosted Matomo instance
google fonts	fonts.gstatic.com/s/ralew...	Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/
google fonts	fonts.gstatic.com/s/ralew...	Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/
google tag manager	www.googletagmanager.com/...	Use hosted Matomo instance
google analytics	www.google-analytics.com/...	Use hosted Matomo instance

flag	country	hostname	ip	city
	France	cns.sante.fr	185.194.81.38	?
	États Unis	fonts.googleapis.com	142.250.68.106	?
	États Unis	ajax.googleapis.com	142.250.217.138	?
	États Unis	www.google-analytics.com	142.250.68.46	?
	États Unis	fonts.gstatic.com	142.250.188.227	?
	États Unis	www.googletagmanager.com	172.217.12.136	?

https://cns.sante.fr

LightHouse

https://cns.sante.fr/environ 5 heures

Cookiesenviron 5 heures

Scripts tiersenviron 5 heures

Déclaration de mise en accessibilité

non-conforme