update: https://benefriches-staging.osc-fr1.scalingo.io

results/aHR0cHM6Ly9iZW5lZnJpY2hlcy1zdGFnaW5nLm9zYy1mcjEuc2NhbGluZ28uaW8=/ecoindex.json

@@ -3,15 +3,15 @@
         "width": 1920,
         "height": 1080,
         "url": "https://benefriches-staging.osc-fr1.scalingo.io",
-        "size": 2563.386,
+        "size": 2564.457,
         "nodes": 377,
         "requests": 44,
         "grade": "C",
         "score": 64.0,
         "ges": 1.72,
         "water": 2.58,
         "ecoindex_version": "5.4.2",
-        "date": "2024-05-26 02:28:50.946939",
+        "date": "2024-06-02 02:33:17.648240",
         "page_type": null
     }
 ]

results/aHR0cHM6Ly9iZW5lZnJpY2hlcy1zdGFnaW5nLm9zYy1mcjEuc2NhbGluZ28uaW8=/http.json

@@ -1 +1 @@
-{"url":"https://benefriches-staging.osc-fr1.scalingo.io","algorithm_version":3,"end_time":"Sun, 26 May 2024 02:30:37 GMT","grade":"A+","hidden":false,"likelihood_indicator":"LOW","response_headers":{"Connection":"keep-alive","Content-Encoding":"gzip","Content-Security-Policy":"default-src 'self'; script-src 'self' https://tally.so/widgets/embed.js https://stats.beta.gouv.fr ;connect-src 'self' https://stats.beta.gouv.fr/matomo.php https://api-adresse.data.gouv.fr/search/ https://geo.api.gouv.fr/communes/;font-src 'self';img-src 'self' data: https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org;frame-ancestors 'none';style-src 'self' 'unsafe-inline'; frame-src https://tally.so;","Content-Type":"text/html; charset=utf-8","Date":"Sun, 26 May 2024 02:30:36 GMT","ETag":"W/\"6650866f-40d\"","Last-Modified":"Fri, 24 May 2024 12:22:07 GMT","Strict-Transport-Security":"max-age=31536000","Transfer-Encoding":"chunked","Vary":"Accept-Encoding","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Request-ID":"ba499f15-400b-4346-ae78-ea344988389d"},"scan_id":51481111,"score":100,"start_time":"Sun, 26 May 2024 02:30:35 GMT","state":"FINISHED","status_code":200,"tests_failed":1,"tests_passed":10,"tests_quantity":11,"details":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","output":{"data":{"connect-src":["'self'","https://geo.api.gouv.fr/communes/","https://api-adresse.data.gouv.fr/search/","https://stats.beta.gouv.fr/matomo.php"],"default-src":["'self'"],"font-src":["'self'"],"frame-ancestors":["'none'"],"frame-src":["https://tally.so"],"img-src":["https://b.tile.openstreetmap.org","'self'","data:","https://a.tile.openstreetmap.org","https://c.tile.openstreetmap.org"],"script-src":["'self'","https://stats.beta.gouv.fr","https://tally.so/widgets/embed.js"],"style-src":["'self'","'unsafe-inline'"]},"http":true,"meta":false,"numPolicies":1,"policy":{"antiClickjacking":true,"defaultNone":false,"insecureBaseUri":true,"insecureFormAction":true,"insecureSchemeActive":false,"insecureSchemePassive":false,"strictDynamic":false,"unsafeEval":false,"unsafeInline":false,"unsafeInlineStyle":true,"unsafeObjects":false}},"pass":true,"result":"csp-implemented-with-unsafe-inline-in-style-src-only","score_description":"Content Security Policy (CSP) implemented with unsafe sources inside style-src. This includes 'unsafe-inline', data: or overly broad sources such as https:.","score_modifier":0},"contribute":{"expectation":"contribute-json-only-required-on-mozilla-properties","name":"contribute","output":{"data":null},"pass":true,"result":"contribute-json-only-required-on-mozilla-properties","score_description":"Contribute.json isn't required on websites that don't belong to Mozilla","score_modifier":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","output":{"data":null,"sameSite":null},"pass":true,"result":"cookies-not-found","score_description":"No cookies detected","score_modifier":0},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","output":{"data":{"acao":null,"clientaccesspolicy":null,"crossdomain":null}},"pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"Content is not visible via cross-origin resource sharing (CORS) files or headers","score_modifier":0},"redirection":{"expectation":"redirection-to-https","name":"redirection","output":{"destination":"https://benefriches-staging.osc-fr1.scalingo.io/","redirects":true,"route":["http://benefriches-staging.osc-fr1.scalingo.io/","https://benefriches-staging.osc-fr1.scalingo.io/"],"status_code":200},"pass":true,"result":"redirection-to-https","score_description":"Initial redirection is to HTTPS on same host, final destination is HTTPS","score_modifier":0},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","output":{"data":null,"http":false,"meta":false},"pass":true,"result":"referrer-policy-not-implemented","score_description":"Referrer-Policy header not implemented","score_modifier":0},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","output":{"data":"max-age=31536000","includeSubDomains":false,"max-age":31536000,"preload":false,"preloaded":false},"pass":true,"result":"hsts-implemented-max-age-at-least-six-months","score_description":"HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)","score_modifier":0},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","output":{"data":{"https://tally.so/widgets/embed.js":{"crossorigin":null,"integrity":null}}},"pass":false,"result":"sri-not-implemented-but-external-scripts-loaded-securely","score_description":"Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS","score_modifier":-5},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","output":{"data":"nosniff"},"pass":true,"result":"x-content-type-options-nosniff","score_description":"X-Content-Type-Options header set to \"nosniff\"","score_modifier":0},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","output":{"data":"DENY"},"pass":true,"result":"x-frame-options-implemented-via-csp","score_description":"X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive","score_modifier":5},"x-xss-protection":{"expectation":"x-xss-protection-disabled","name":"x-xss-protection","output":{"data":null},"pass":true,"result":"x-xss-protection-not-implemented","score_description":"Deprecated X-XSS-Protection header not implemented","score_modifier":0}}}
+{"url":"https://benefriches-staging.osc-fr1.scalingo.io","algorithm_version":3,"end_time":"Sun, 02 Jun 2024 02:35:16 GMT","grade":"A+","hidden":false,"likelihood_indicator":"LOW","response_headers":{"Connection":"keep-alive","Content-Encoding":"gzip","Content-Security-Policy":"default-src 'self'; script-src 'self' https://tally.so/widgets/embed.js https://stats.beta.gouv.fr ;connect-src 'self' https://stats.beta.gouv.fr/matomo.php https://api-adresse.data.gouv.fr/search/ https://geo.api.gouv.fr/communes/;font-src 'self';img-src 'self' data: https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org;frame-ancestors 'none';style-src 'self' 'unsafe-inline'; frame-src https://tally.so;","Content-Type":"text/html; charset=utf-8","Date":"Sun, 02 Jun 2024 02:35:15 GMT","ETag":"W/\"66585141-40d\"","Last-Modified":"Thu, 30 May 2024 10:13:21 GMT","Strict-Transport-Security":"max-age=31536000","Transfer-Encoding":"chunked","Vary":"Accept-Encoding","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Request-ID":"54f87179-f837-4b72-bc9a-d46d316f1d68"},"scan_id":51735589,"score":100,"start_time":"Sun, 02 Jun 2024 02:35:14 GMT","state":"FINISHED","status_code":200,"tests_failed":1,"tests_passed":10,"tests_quantity":11,"details":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","output":{"data":{"connect-src":["https://geo.api.gouv.fr/communes/","'self'","https://stats.beta.gouv.fr/matomo.php","https://api-adresse.data.gouv.fr/search/"],"default-src":["'self'"],"font-src":["'self'"],"frame-ancestors":["'none'"],"frame-src":["https://tally.so"],"img-src":["'self'","https://a.tile.openstreetmap.org","data:","https://c.tile.openstreetmap.org","https://b.tile.openstreetmap.org"],"script-src":["'self'","https://tally.so/widgets/embed.js","https://stats.beta.gouv.fr"],"style-src":["'self'","'unsafe-inline'"]},"http":true,"meta":false,"numPolicies":1,"policy":{"antiClickjacking":true,"defaultNone":false,"insecureBaseUri":true,"insecureFormAction":true,"insecureSchemeActive":false,"insecureSchemePassive":false,"strictDynamic":false,"unsafeEval":false,"unsafeInline":false,"unsafeInlineStyle":true,"unsafeObjects":false}},"pass":true,"result":"csp-implemented-with-unsafe-inline-in-style-src-only","score_description":"Content Security Policy (CSP) implemented with unsafe sources inside style-src. This includes 'unsafe-inline', data: or overly broad sources such as https:.","score_modifier":0},"contribute":{"expectation":"contribute-json-only-required-on-mozilla-properties","name":"contribute","output":{"data":null},"pass":true,"result":"contribute-json-only-required-on-mozilla-properties","score_description":"Contribute.json isn't required on websites that don't belong to Mozilla","score_modifier":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","output":{"data":null,"sameSite":null},"pass":true,"result":"cookies-not-found","score_description":"No cookies detected","score_modifier":0},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","output":{"data":{"acao":null,"clientaccesspolicy":null,"crossdomain":null}},"pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"Content is not visible via cross-origin resource sharing (CORS) files or headers","score_modifier":0},"redirection":{"expectation":"redirection-to-https","name":"redirection","output":{"destination":"https://benefriches-staging.osc-fr1.scalingo.io/","redirects":true,"route":["http://benefriches-staging.osc-fr1.scalingo.io/","https://benefriches-staging.osc-fr1.scalingo.io/"],"status_code":200},"pass":true,"result":"redirection-to-https","score_description":"Initial redirection is to HTTPS on same host, final destination is HTTPS","score_modifier":0},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","output":{"data":null,"http":false,"meta":false},"pass":true,"result":"referrer-policy-not-implemented","score_description":"Referrer-Policy header not implemented","score_modifier":0},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","output":{"data":"max-age=31536000","includeSubDomains":false,"max-age":31536000,"preload":false,"preloaded":false},"pass":true,"result":"hsts-implemented-max-age-at-least-six-months","score_description":"HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)","score_modifier":0},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","output":{"data":{"https://tally.so/widgets/embed.js":{"crossorigin":null,"integrity":null}}},"pass":false,"result":"sri-not-implemented-but-external-scripts-loaded-securely","score_description":"Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS","score_modifier":-5},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","output":{"data":"nosniff"},"pass":true,"result":"x-content-type-options-nosniff","score_description":"X-Content-Type-Options header set to \"nosniff\"","score_modifier":0},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","output":{"data":"DENY"},"pass":true,"result":"x-frame-options-implemented-via-csp","score_description":"X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive","score_modifier":5},"x-xss-protection":{"expectation":"x-xss-protection-disabled","name":"x-xss-protection","output":{"data":null},"pass":true,"result":"x-xss-protection-not-implemented","score_description":"Deprecated X-XSS-Protection header not implemented","score_modifier":0}}}