content-security-policy

Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.

cookies

All cookies use the Secure flag and all session cookies use the HttpOnly flag

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

Referrer-Policy header set to "no-referrer-when-downgrade"

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) header set to SAMEORIGIN or DENY

x-xss-protection

Deprecated X-XSS-Protection header set to "1; mode=block"

Diagnostics

Metrics

_gat

_gid

BIGipServerpool-drees-rfas.cegedim.cloud-HTTP

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.

WordPress

MySQL is an open-source relational database management system.

MySQL

PHP is a general-purpose scripting language used for web development.

Twenty Sixteen is the default WordPress theme for 2016.

Twenty Sixteen

Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.

Bootstrap

Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.

Contact Form 7

Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.

Yoast SEO

Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.

Site Kit

Twitter Emoji is a set of open-source emoticons and emojis for Twitter, TweetDeck, and also for Android and iOS versions of the application.

Twitter Emoji (Twemoji)

Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.

jQuery Migrate

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jQuery

Google Analytics is a free web analytics service that tracks and reports website traffic.

Google Analytics

Google Font API is a web service that supports open-source font files that can be used on your web designs.

Google Font API

Gravatar is a service for providing globally unique avatars.

Gravatar

RSS is a family of web feed formats used to publish frequently updated works—such as blog entries, news headlines, audio, and video—in a standardized format.

Open Graph is a protocol that is used to integrate any web page into the social graph.

Impact	Description	Documentation
-20		Doc Content Security Policy. L'extension github.com/april/laboratory permet de générer la CSP pour votre application.

https://publisocial.fr

Mozilla HTTP observatoryenviron 3 heures

SSL

Expiration : 14/07/2025