content-security-policy

Content Security Policy (CSP) header not implemented

cookies

All cookies use the Secure flag and all session cookies use the HttpOnly flag

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin

x-content-type-options

X-Content-Type-Options header cannot be recognized

x-frame-options

X-Frame-Options (XFO) header set to SAMEORIGIN or DENY

x-xss-protection

Deprecated X-XSS-Protection header not implemented

Diagnostics

Metrics

xtant

xtan

xtvrn

BIGipServerpool-djepva-dlm-prod2.cegedim.cloud-HTTP

Drupal is a free and open-source web content management framework.

Drupal

PHP is a general-purpose scripting language used for web development.

Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.

Firebase

Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.

Bootstrap

Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.

Select2

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jQuery

AT Internet XiTi

AT Internet Analyzer

Google Font API is a web service that supports open-source font files that can be used on your web designs.

Google Font API

reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.

reCAPTCHA

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

Progressive Web Apps (PWAs) are web apps built and enhanced with modern APIs to deliver enhanced capabilities, reliability, and installability while reaching anyone, anywhere, on any device, all with a single codebase.

Open Graph is a protocol that is used to integrate any web page into the social graph.

name	domain	httpOnly	secure
xtant	.decouvrirlemonde.jeunes.gouv.fr	❌	❌
xtan	.decouvrirlemonde.jeunes.gouv.fr	❌	❌
xtvrn	.decouvrirlemonde.jeunes.gouv.fr	❌	❌
BIGipServerpool-djepva-dlm-prod2.cegedim.cloud-HTTP	decouvrirlemonde.jeunes.gouv.fr	✔️	✔️

type	url	details
google analytics	3452220.fls.doubleclick.n...	Use hosted Matomo instance
google analytics	3452220.fls.doubleclick.n...	Use hosted Matomo instance
google	adservice.google.com/ddm/...	Use hosted Matomo instance
xiti	logc406.xiti.com/hit.xiti...	Use hosted Matomo instance
xiti	logc406.xiti.com/hit.xiti...	Use hosted Matomo instance

flag	country	hostname	ip	city
	France	decouvrirlemonde.jeunes.gouv.fr	185.194.83.65	?
	États Unis	3452220.fls.doubleclick.net	142.251.46.198	?
	États Unis	adservice.google.com	142.250.188.2	?
	États Unis	logc406.xiti.com	18.238.193.55	?

https://decouvrirlemonde.jeunes.gouv.fr

LightHouse

https://decouvrirlemonde.jeunes.gouv.fr/environ 6 heures

Cookiesenviron 6 heures

Scripts tiersenviron 6 heures

Déclaration de mise en accessibilité

non-conforme