content-security-policy

Content Security Policy (CSP) implemented with unsafe sources inside style-src. This includes 'unsafe-inline', data: or overly broad sources such as https:.

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

Referrer-Policy header set to "no-referrer", "same-origin", "strict-origin" or "strict-origin-when-cross-origin"

strict-transport-security

HTTP Strict Transport Security (HSTS) header cannot be recognized

subresource-integrity

Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive

x-xss-protection

Deprecated X-XSS-Protection header not implemented

default-src 'self' *.fabrique.social.gouv.fr *.meilisearch.io/multi-search *.meilisearch.com/multi-search 1j1s-front.osc-fr1.scalingo.io *.1jeune1solution.gouv.fr; script-src 'self' yssn.1jeune1solution.gouv.fr https://matomo.fabrique.social.gouv.fr/ https://*.adform.net; img-src 'self' *.google.com data: cos-njord-dgefp-1j1s-prod.storage-eb4.cegedim.cloud yssn.1jeune1solution.gouv.fr https://matomo.fabrique.social.gouv.fr/ img.youtube.com jedonnemonavis.numerique.gouv.fr; style-src 'self' 'unsafe-inline' yssn.1jeune1solution.gouv.fr https://matomo.fabrique.social.gouv.fr/; frame-ancestors 'none'; frame-src 'self' *.apprentissage.beta.gouv.fr immersion-facile.beta.gouv.fr deposer-offre.www.1jeune1solution.gouv.fr *.youtube-nocookie.com simulateur-alternance.1jeune1solution.gouv.fr https://*.adform.net mes-aides.francetravail.fr; form-action 'self'; base-uri 'none';

Diagnostics

Metrics

consentement

Sentry is an open-source platform for workflow productivity, aggregating errors from across the stack in real time.

Sentry

Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.

Node.js

Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.

Firebase

React is an open-source JavaScript library for building user interfaces or UI components.

React

Next.js is a React framework for developing single page Javascript applications.

Next.js

Matomo Analytics is a free and open-source web analytics application, that runs on a PHP/MySQL web-server.

Matomo Analytics

reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.

reCAPTCHA

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

Cloudflare

Webpack is an open-source JavaScript module bundler.

Webpack

Module Federation is a webpack technology for dynamically loading parts of other independently deployed builds.

Module Federation

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

flag	country	hostname	ip	city
	?	www.1jeune1solution.gouv.fr	104.22.66.98	?

https://www.1jeune1solution.gouv.fr

LightHouse

https://www.1jeune1solution.gouv.fr/environ 1 heure

Cookiesenviron 1 heure

Scripts tiersenviron 1 heure

Déclaration de mise en accessibilité

Conformité partielle

name	domain	httpOnly	secure
consentement	www.1jeune1solution.gouv.fr	❌	✔️