content-security-policy

Content Security Policy (CSP) header not implemented

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

All cookies use the Secure flag and all session cookies use the HttpOnly flag

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header not implemented

subresource-integrity

Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) header set to SAMEORIGIN or DENY

x-xss-protection

Deprecated X-XSS-Protection header not implemented

Diagnostics

Metrics

BIGipServerpool-handicap-v2.cegedim.cloud-HTTP

Drupal is a free and open-source web content management framework.

Drupal

PHP is a general-purpose scripting language used for web development.

Drupal Multisite enables separate, independent sites to be served from a single codebase.

Drupal Multisite

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jQuery

Progressive Web Apps (PWAs) are web apps built and enhanced with modern APIs to deliver enhanced capabilities, reliability, and installability while reaching anyone, anywhere, on any device, all with a single codebase.

name	domain	httpOnly	secure
BIGipServerpool-handicap-v2.cegedim.cloud-HTTP	handicap.gouv.fr	✔️	✔️

flag	country	hostname	ip	city
	France	handicap.gouv.fr	185.194.82.206	?

https://handicap.gouv.fr

LightHouse

https://handicap.gouv.fr/environ 4 heures

Cookiesenviron 15 heures

Scripts tiersenviron 15 heures

Déclaration de mise en accessibilité

Conformité totale 🎉