content-security-policy

Content Security Policy (CSP) header not implemented

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

All cookies use the Secure flag and all session cookies use the HttpOnly flag

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header not implemented

subresource-integrity

Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) header set to SAMEORIGIN or DENY

x-xss-protection

Deprecated X-XSS-Protection header not implemented

Diagnostics

Metrics

tartaucitron

_pctx

_pcid

_pprv

BIGipServerpool-ars.cegedim.cloud-HTTP

Drupal is a free and open-source web content management framework.

Drupal

PHP is a general-purpose scripting language used for web development.

Raphael is a cross-browser JavaScript library that draws Vector graphics for websites.

Raphael

Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.

Bootstrap

Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.

Moment.js

Matomo Analytics is a free and open-source web analytics application, that runs on a PHP/MySQL web-server.

Matomo Analytics

Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.

Lodash

jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.

jQuery UI

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jQuery

reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.

name	domain	httpOnly	secure
tartaucitron	www.ars.sante.fr	❌	❌
fid	www.ars.sante.fr	✔️	✔️
_pctx	www.ars.sante.fr	❌	✔️
_pcid	www.ars.sante.fr	❌	✔️
_pprv	www.ars.sante.fr	❌	✔️
BIGipServerpool-ars.cegedim.cloud-HTTP	www.ars.sante.fr	✔️	✔️

type	url	details
at-internet	tag.aticdn.net/piano-anal...	Ensure your TOS notify the AT internet usage
xiti	logs1407.xiti.com/event?s...	Use hosted Matomo instance

flag	country	hostname	ip	city
	France	www.ars.sante.fr	185.194.82.45	?
	États Unis	tag.aticdn.net	18.160.18.104	?
	États Unis	logs1407.xiti.com	18.154.229.58	?

https://www.ars.sante.fr

LightHouse

https://www.ars.sante.fr/environ 1 heure

Cookiesenviron 1 heure

Scripts tiersenviron 1 heure

Déclaration de mise en accessibilité

Conformité partielle