content-security-policy

Content Security Policy (CSP) header not implemented

cookies

Cookies set without using the Secure flag, but transmission over HTTP prevented by HSTS

cross-origin-resource-sharing

Public content is visible via cross-origin resource sharing (CORS) Access-Control-Allow-Origin header

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) header set to SAMEORIGIN or DENY

x-xss-protection

Deprecated X-XSS-Protection header set to "1; mode=block"

Diagnostics

Metrics

TS0160f77f

TypeScript is an open-source language which builds on JavaScript  by adding static type definitions.

TypeScript

Leaflet is the open-source JavaScript library for mobile-friendly interactive maps.

Leaflet

Zone.js

Angular is a TypeScript-based open-source web application framework led by the Angular Team at Google.

Angular

Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.

Lodash

Livefyre is a platform that integrates with the social web to boost social interaction.

Livefyre

core-js is a modular standard library for JavaScript, with polyfills for cutting-edge ECMAScript features.

core-js

reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.

reCAPTCHA

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

Webpack is an open-source JavaScript module bundler.

Webpack

Progressive Web Apps (PWAs) are web apps built and enhanced with modern APIs to deliver enhanced capabilities, reliability, and installability while reaching anyone, anywhere, on any device, all with a single codebase.

Module Federation is a webpack technology for dynamically loading parts of other independently deployed builds.

name	domain	httpOnly	secure
TS0160f77f	.www.sipsi.travail.gouv.fr	❌	❌

flag	country	hostname	ip	city
	France	www.sipsi.travail.gouv.fr	164.131.124.235	?

https://www.sipsi.travail.gouv.fr

LightHouse

https://www.sipsi.travail.gouv.fr/39 minutes

Cookies38 minutes

Scripts tiers38 minutes

Déclaration de mise en accessibilité

Conformité partielle