update: https://benefriches-staging.osc-fr1.scalingo.io

incubateur-ademe · Jun 9, 2024 · c97294f · c97294f
1 parent f3ca61e
commit c97294f
Show file tree

Hide file tree

Showing 14 changed files with 3,267 additions and 3,212 deletions.
diff --git a/results/aHR0cHM6Ly9iZW5lZnJpY2hlcy1zdGFnaW5nLm9zYy1mcjEuc2NhbGluZ28uaW8=/404.json b/results/aHR0cHM6Ly9iZW5lZnJpY2hlcy1zdGFnaW5nLm9zYy1mcjEuc2NhbGluZ28uaW8=/404.json
diff --git a/results/aHR0cHM6Ly9iZW5lZnJpY2hlcy1zdGFnaW5nLm9zYy1mcjEuc2NhbGluZ28uaW8=/betagouv.json b/results/aHR0cHM6Ly9iZW5lZnJpY2hlcy1zdGFnaW5nLm9zYy1mcjEuc2NhbGluZ28uaW8=/betagouv.json
@@ -22,7 +22,18 @@
         "start": "2023-04-05",
         "end": ""
       }
-    ]
+    ],
+    "sponsors": [
+      "ademe"
+    ],
+    "thematiques": [
+      "Territoires",
+      "Écologie"
+    ],
+    "analyse_risques": "true",
+    "analyse_risques_url": "https://github.com/incubateur-ademe/benefriches/blob/main/SECURITY.md",
+    "dashlord_url": "https://incubateur-ademe.github.io/dashlord/url/benefriches-ademe-fr/",
+    "accessibility_status": "non conforme"
   },
   "relationships": {
     "incubator": {

diff --git a/results/aHR0cHM6Ly9iZW5lZnJpY2hlcy1zdGFnaW5nLm9zYy1mcjEuc2NhbGluZ28uaW8=/ecoindex.json b/results/aHR0cHM6Ly9iZW5lZnJpY2hlcy1zdGFnaW5nLm9zYy1mcjEuc2NhbGluZ28uaW8=/ecoindex.json
@@ -3,15 +3,15 @@
         "width": 1920,
         "height": 1080,
         "url": "https://benefriches-staging.osc-fr1.scalingo.io",
-        "size": 2564.457,
+        "size": 2565.343,
         "nodes": 377,
         "requests": 44,
         "grade": "C",
         "score": 64.0,
         "ges": 1.72,
         "water": 2.58,
         "ecoindex_version": "5.4.2",
-        "date": "2024-06-02 02:33:17.648240",
+        "date": "2024-06-09 02:40:32.915442",
         "page_type": null
     }
 ]
diff --git a/results/aHR0cHM6Ly9iZW5lZnJpY2hlcy1zdGFnaW5nLm9zYy1mcjEuc2NhbGluZ28uaW8=/http.json b/results/aHR0cHM6Ly9iZW5lZnJpY2hlcy1zdGFnaW5nLm9zYy1mcjEuc2NhbGluZ28uaW8=/http.json
@@ -1 +1 @@
-{"url":"https://benefriches-staging.osc-fr1.scalingo.io","algorithm_version":3,"end_time":"Sun, 02 Jun 2024 02:35:16 GMT","grade":"A+","hidden":false,"likelihood_indicator":"LOW","response_headers":{"Connection":"keep-alive","Content-Encoding":"gzip","Content-Security-Policy":"default-src 'self'; script-src 'self' https://tally.so/widgets/embed.js https://stats.beta.gouv.fr ;connect-src 'self' https://stats.beta.gouv.fr/matomo.php https://api-adresse.data.gouv.fr/search/ https://geo.api.gouv.fr/communes/;font-src 'self';img-src 'self' data: https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org;frame-ancestors 'none';style-src 'self' 'unsafe-inline'; frame-src https://tally.so;","Content-Type":"text/html; charset=utf-8","Date":"Sun, 02 Jun 2024 02:35:15 GMT","ETag":"W/\"66585141-40d\"","Last-Modified":"Thu, 30 May 2024 10:13:21 GMT","Strict-Transport-Security":"max-age=31536000","Transfer-Encoding":"chunked","Vary":"Accept-Encoding","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Request-ID":"54f87179-f837-4b72-bc9a-d46d316f1d68"},"scan_id":51735589,"score":100,"start_time":"Sun, 02 Jun 2024 02:35:14 GMT","state":"FINISHED","status_code":200,"tests_failed":1,"tests_passed":10,"tests_quantity":11,"details":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","output":{"data":{"connect-src":["https://geo.api.gouv.fr/communes/","'self'","https://stats.beta.gouv.fr/matomo.php","https://api-adresse.data.gouv.fr/search/"],"default-src":["'self'"],"font-src":["'self'"],"frame-ancestors":["'none'"],"frame-src":["https://tally.so"],"img-src":["'self'","https://a.tile.openstreetmap.org","data:","https://c.tile.openstreetmap.org","https://b.tile.openstreetmap.org"],"script-src":["'self'","https://tally.so/widgets/embed.js","https://stats.beta.gouv.fr"],"style-src":["'self'","'unsafe-inline'"]},"http":true,"meta":false,"numPolicies":1,"policy":{"antiClickjacking":true,"defaultNone":false,"insecureBaseUri":true,"insecureFormAction":true,"insecureSchemeActive":false,"insecureSchemePassive":false,"strictDynamic":false,"unsafeEval":false,"unsafeInline":false,"unsafeInlineStyle":true,"unsafeObjects":false}},"pass":true,"result":"csp-implemented-with-unsafe-inline-in-style-src-only","score_description":"Content Security Policy (CSP) implemented with unsafe sources inside style-src. This includes 'unsafe-inline', data: or overly broad sources such as https:.","score_modifier":0},"contribute":{"expectation":"contribute-json-only-required-on-mozilla-properties","name":"contribute","output":{"data":null},"pass":true,"result":"contribute-json-only-required-on-mozilla-properties","score_description":"Contribute.json isn't required on websites that don't belong to Mozilla","score_modifier":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","output":{"data":null,"sameSite":null},"pass":true,"result":"cookies-not-found","score_description":"No cookies detected","score_modifier":0},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","output":{"data":{"acao":null,"clientaccesspolicy":null,"crossdomain":null}},"pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"Content is not visible via cross-origin resource sharing (CORS) files or headers","score_modifier":0},"redirection":{"expectation":"redirection-to-https","name":"redirection","output":{"destination":"https://benefriches-staging.osc-fr1.scalingo.io/","redirects":true,"route":["http://benefriches-staging.osc-fr1.scalingo.io/","https://benefriches-staging.osc-fr1.scalingo.io/"],"status_code":200},"pass":true,"result":"redirection-to-https","score_description":"Initial redirection is to HTTPS on same host, final destination is HTTPS","score_modifier":0},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","output":{"data":null,"http":false,"meta":false},"pass":true,"result":"referrer-policy-not-implemented","score_description":"Referrer-Policy header not implemented","score_modifier":0},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","output":{"data":"max-age=31536000","includeSubDomains":false,"max-age":31536000,"preload":false,"preloaded":false},"pass":true,"result":"hsts-implemented-max-age-at-least-six-months","score_description":"HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)","score_modifier":0},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","output":{"data":{"https://tally.so/widgets/embed.js":{"crossorigin":null,"integrity":null}}},"pass":false,"result":"sri-not-implemented-but-external-scripts-loaded-securely","score_description":"Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS","score_modifier":-5},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","output":{"data":"nosniff"},"pass":true,"result":"x-content-type-options-nosniff","score_description":"X-Content-Type-Options header set to \"nosniff\"","score_modifier":0},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","output":{"data":"DENY"},"pass":true,"result":"x-frame-options-implemented-via-csp","score_description":"X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive","score_modifier":5},"x-xss-protection":{"expectation":"x-xss-protection-disabled","name":"x-xss-protection","output":{"data":null},"pass":true,"result":"x-xss-protection-not-implemented","score_description":"Deprecated X-XSS-Protection header not implemented","score_modifier":0}}}
+{"url":"https://benefriches-staging.osc-fr1.scalingo.io","algorithm_version":3,"end_time":"Sun, 09 Jun 2024 02:42:34 GMT","grade":"A+","hidden":false,"likelihood_indicator":"LOW","response_headers":{"Connection":"keep-alive","Content-Encoding":"gzip","Content-Security-Policy":"default-src 'self'; script-src 'self' https://tally.so/widgets/embed.js https://stats.beta.gouv.fr ;connect-src 'self' https://stats.beta.gouv.fr/matomo.php https://api-adresse.data.gouv.fr/search/ https://geo.api.gouv.fr/communes/;font-src 'self';img-src 'self' data: https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org;frame-ancestors 'none';style-src 'self' 'unsafe-inline'; frame-src https://tally.so;","Content-Type":"text/html; charset=utf-8","Date":"Sun, 09 Jun 2024 02:42:33 GMT","ETag":"W/\"6661e8a4-40d\"","Last-Modified":"Thu, 06 Jun 2024 16:49:40 GMT","Strict-Transport-Security":"max-age=31536000","Transfer-Encoding":"chunked","Vary":"Accept-Encoding","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Request-ID":"3e130e5f-8537-48ca-b999-05b4759a291c"},"scan_id":52038682,"score":100,"start_time":"Sun, 09 Jun 2024 02:42:32 GMT","state":"FINISHED","status_code":200,"tests_failed":1,"tests_passed":10,"tests_quantity":11,"details":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","output":{"data":{"connect-src":["https://api-adresse.data.gouv.fr/search/","'self'","https://geo.api.gouv.fr/communes/","https://stats.beta.gouv.fr/matomo.php"],"default-src":["'self'"],"font-src":["'self'"],"frame-ancestors":["'none'"],"frame-src":["https://tally.so"],"img-src":["https://b.tile.openstreetmap.org","'self'","https://a.tile.openstreetmap.org","data:","https://c.tile.openstreetmap.org"],"script-src":["https://stats.beta.gouv.fr","'self'","https://tally.so/widgets/embed.js"],"style-src":["'unsafe-inline'","'self'"]},"http":true,"meta":false,"numPolicies":1,"policy":{"antiClickjacking":true,"defaultNone":false,"insecureBaseUri":true,"insecureFormAction":true,"insecureSchemeActive":false,"insecureSchemePassive":false,"strictDynamic":false,"unsafeEval":false,"unsafeInline":false,"unsafeInlineStyle":true,"unsafeObjects":false}},"pass":true,"result":"csp-implemented-with-unsafe-inline-in-style-src-only","score_description":"Content Security Policy (CSP) implemented with unsafe sources inside style-src. This includes 'unsafe-inline', data: or overly broad sources such as https:.","score_modifier":0},"contribute":{"expectation":"contribute-json-only-required-on-mozilla-properties","name":"contribute","output":{"data":null},"pass":true,"result":"contribute-json-only-required-on-mozilla-properties","score_description":"Contribute.json isn't required on websites that don't belong to Mozilla","score_modifier":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","output":{"data":null,"sameSite":null},"pass":true,"result":"cookies-not-found","score_description":"No cookies detected","score_modifier":0},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","output":{"data":{"acao":null,"clientaccesspolicy":null,"crossdomain":null}},"pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"Content is not visible via cross-origin resource sharing (CORS) files or headers","score_modifier":0},"redirection":{"expectation":"redirection-to-https","name":"redirection","output":{"destination":"https://benefriches-staging.osc-fr1.scalingo.io/","redirects":true,"route":["http://benefriches-staging.osc-fr1.scalingo.io/","https://benefriches-staging.osc-fr1.scalingo.io/"],"status_code":200},"pass":true,"result":"redirection-to-https","score_description":"Initial redirection is to HTTPS on same host, final destination is HTTPS","score_modifier":0},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","output":{"data":null,"http":false,"meta":false},"pass":true,"result":"referrer-policy-not-implemented","score_description":"Referrer-Policy header not implemented","score_modifier":0},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","output":{"data":"max-age=31536000","includeSubDomains":false,"max-age":31536000,"preload":false,"preloaded":false},"pass":true,"result":"hsts-implemented-max-age-at-least-six-months","score_description":"HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)","score_modifier":0},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","output":{"data":{"https://tally.so/widgets/embed.js":{"crossorigin":null,"integrity":null}}},"pass":false,"result":"sri-not-implemented-but-external-scripts-loaded-securely","score_description":"Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS","score_modifier":-5},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","output":{"data":"nosniff"},"pass":true,"result":"x-content-type-options-nosniff","score_description":"X-Content-Type-Options header set to \"nosniff\"","score_modifier":0},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","output":{"data":"DENY"},"pass":true,"result":"x-frame-options-implemented-via-csp","score_description":"X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive","score_modifier":5},"x-xss-protection":{"expectation":"x-xss-protection-disabled","name":"x-xss-protection","output":{"data":null},"pass":true,"result":"x-xss-protection-not-implemented","score_description":"Deprecated X-XSS-Protection header not implemented","score_modifier":0}}}
diff --git a/...2NhbGluZ28uaW8=/lhr-aHR0cHM6Ly9iZW5lZnJpY2hlcy1zdGFnaW5nLm9zYy1mcjEuc2NhbGluZ28uaW8v.html b/...2NhbGluZ28uaW8=/lhr-aHR0cHM6Ly9iZW5lZnJpY2hlcy1zdGFnaW5nLm9zYy1mcjEuc2NhbGluZ28uaW8v.html
diff --git a/...lhr-aHR0cHM6Ly9iZW5lZnJpY2hlcy1zdGFnaW5nLm9zYy1mcjEuc2NhbGluZ28uaW8vcHJlbWllcnMtcGFz.html b/...lhr-aHR0cHM6Ly9iZW5lZnJpY2hlcy1zdGFnaW5nLm9zYy1mcjEuc2NhbGluZ28uaW8vcHJlbWllcnMtcGFz.html
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		{"url":"https://benefriches-staging.osc-fr1.scalingo.io","algorithm_version":3,"end_time":"Sun, 02 Jun 2024 02:35:16 GMT","grade":"A+","hidden":false,"likelihood_indicator":"LOW","response_headers":{"Connection":"keep-alive","Content-Encoding":"gzip","Content-Security-Policy":"default-src 'self'; script-src 'self' https://tally.so/widgets/embed.js https://stats.beta.gouv.fr ;connect-src 'self' https://stats.beta.gouv.fr/matomo.php https://api-adresse.data.gouv.fr/search/ https://geo.api.gouv.fr/communes/;font-src 'self';img-src 'self' data: https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org;frame-ancestors 'none';style-src 'self' 'unsafe-inline'; frame-src https://tally.so;","Content-Type":"text/html; charset=utf-8","Date":"Sun, 02 Jun 2024 02:35:15 GMT","ETag":"W/\"66585141-40d\"","Last-Modified":"Thu, 30 May 2024 10:13:21 GMT","Strict-Transport-Security":"max-age=31536000","Transfer-Encoding":"chunked","Vary":"Accept-Encoding","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Request-ID":"54f87179-f837-4b72-bc9a-d46d316f1d68"},"scan_id":51735589,"score":100,"start_time":"Sun, 02 Jun 2024 02:35:14 GMT","state":"FINISHED","status_code":200,"tests_failed":1,"tests_passed":10,"tests_quantity":11,"details":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","output":{"data":{"connect-src":["https://geo.api.gouv.fr/communes/","'self'","https://stats.beta.gouv.fr/matomo.php","https://api-adresse.data.gouv.fr/search/"],"default-src":["'self'"],"font-src":["'self'"],"frame-ancestors":["'none'"],"frame-src":["https://tally.so"],"img-src":["'self'","https://a.tile.openstreetmap.org","data:","https://c.tile.openstreetmap.org","https://b.tile.openstreetmap.org"],"script-src":["'self'","https://tally.so/widgets/embed.js","https://stats.beta.gouv.fr"],"style-src":["'self'","'unsafe-inline'"]},"http":true,"meta":false,"numPolicies":1,"policy":{"antiClickjacking":true,"defaultNone":false,"insecureBaseUri":true,"insecureFormAction":true,"insecureSchemeActive":false,"insecureSchemePassive":false,"strictDynamic":false,"unsafeEval":false,"unsafeInline":false,"unsafeInlineStyle":true,"unsafeObjects":false}},"pass":true,"result":"csp-implemented-with-unsafe-inline-in-style-src-only","score_description":"Content Security Policy (CSP) implemented with unsafe sources inside style-src. This includes 'unsafe-inline', data: or overly broad sources such as https:.","score_modifier":0},"contribute":{"expectation":"contribute-json-only-required-on-mozilla-properties","name":"contribute","output":{"data":null},"pass":true,"result":"contribute-json-only-required-on-mozilla-properties","score_description":"Contribute.json isn't required on websites that don't belong to Mozilla","score_modifier":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","output":{"data":null,"sameSite":null},"pass":true,"result":"cookies-not-found","score_description":"No cookies detected","score_modifier":0},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","output":{"data":{"acao":null,"clientaccesspolicy":null,"crossdomain":null}},"pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"Content is not visible via cross-origin resource sharing (CORS) files or headers","score_modifier":0},"redirection":{"expectation":"redirection-to-https","name":"redirection","output":{"destination":"https://benefriches-staging.osc-fr1.scalingo.io/","redirects":true,"route":["http://benefriches-staging.osc-fr1.scalingo.io/","https://benefriches-staging.osc-fr1.scalingo.io/"],"status_code":200},"pass":true,"result":"redirection-to-https","score_description":"Initial redirection is to HTTPS on same host, final destination is HTTPS","score_modifier":0},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","output":{"data":null,"http":false,"meta":false},"pass":true,"result":"referrer-policy-not-implemented","score_description":"Referrer-Policy header not implemented","score_modifier":0},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","output":{"data":"max-age=31536000","includeSubDomains":false,"max-age":31536000,"preload":false,"preloaded":false},"pass":true,"result":"hsts-implemented-max-age-at-least-six-months","score_description":"HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)","score_modifier":0},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","output":{"data":{"https://tally.so/widgets/embed.js":{"crossorigin":null,"integrity":null}}},"pass":false,"result":"sri-not-implemented-but-external-scripts-loaded-securely","score_description":"Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS","score_modifier":-5},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","output":{"data":"nosniff"},"pass":true,"result":"x-content-type-options-nosniff","score_description":"X-Content-Type-Options header set to \"nosniff\"","score_modifier":0},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","output":{"data":"DENY"},"pass":true,"result":"x-frame-options-implemented-via-csp","score_description":"X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive","score_modifier":5},"x-xss-protection":{"expectation":"x-xss-protection-disabled","name":"x-xss-protection","output":{"data":null},"pass":true,"result":"x-xss-protection-not-implemented","score_description":"Deprecated X-XSS-Protection header not implemented","score_modifier":0}}}
		{"url":"https://benefriches-staging.osc-fr1.scalingo.io","algorithm_version":3,"end_time":"Sun, 09 Jun 2024 02:42:34 GMT","grade":"A+","hidden":false,"likelihood_indicator":"LOW","response_headers":{"Connection":"keep-alive","Content-Encoding":"gzip","Content-Security-Policy":"default-src 'self'; script-src 'self' https://tally.so/widgets/embed.js https://stats.beta.gouv.fr ;connect-src 'self' https://stats.beta.gouv.fr/matomo.php https://api-adresse.data.gouv.fr/search/ https://geo.api.gouv.fr/communes/;font-src 'self';img-src 'self' data: https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org;frame-ancestors 'none';style-src 'self' 'unsafe-inline'; frame-src https://tally.so;","Content-Type":"text/html; charset=utf-8","Date":"Sun, 09 Jun 2024 02:42:33 GMT","ETag":"W/\"6661e8a4-40d\"","Last-Modified":"Thu, 06 Jun 2024 16:49:40 GMT","Strict-Transport-Security":"max-age=31536000","Transfer-Encoding":"chunked","Vary":"Accept-Encoding","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Request-ID":"3e130e5f-8537-48ca-b999-05b4759a291c"},"scan_id":52038682,"score":100,"start_time":"Sun, 09 Jun 2024 02:42:32 GMT","state":"FINISHED","status_code":200,"tests_failed":1,"tests_passed":10,"tests_quantity":11,"details":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","output":{"data":{"connect-src":["https://api-adresse.data.gouv.fr/search/","'self'","https://geo.api.gouv.fr/communes/","https://stats.beta.gouv.fr/matomo.php"],"default-src":["'self'"],"font-src":["'self'"],"frame-ancestors":["'none'"],"frame-src":["https://tally.so"],"img-src":["https://b.tile.openstreetmap.org","'self'","https://a.tile.openstreetmap.org","data:","https://c.tile.openstreetmap.org"],"script-src":["https://stats.beta.gouv.fr","'self'","https://tally.so/widgets/embed.js"],"style-src":["'unsafe-inline'","'self'"]},"http":true,"meta":false,"numPolicies":1,"policy":{"antiClickjacking":true,"defaultNone":false,"insecureBaseUri":true,"insecureFormAction":true,"insecureSchemeActive":false,"insecureSchemePassive":false,"strictDynamic":false,"unsafeEval":false,"unsafeInline":false,"unsafeInlineStyle":true,"unsafeObjects":false}},"pass":true,"result":"csp-implemented-with-unsafe-inline-in-style-src-only","score_description":"Content Security Policy (CSP) implemented with unsafe sources inside style-src. This includes 'unsafe-inline', data: or overly broad sources such as https:.","score_modifier":0},"contribute":{"expectation":"contribute-json-only-required-on-mozilla-properties","name":"contribute","output":{"data":null},"pass":true,"result":"contribute-json-only-required-on-mozilla-properties","score_description":"Contribute.json isn't required on websites that don't belong to Mozilla","score_modifier":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","output":{"data":null,"sameSite":null},"pass":true,"result":"cookies-not-found","score_description":"No cookies detected","score_modifier":0},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","output":{"data":{"acao":null,"clientaccesspolicy":null,"crossdomain":null}},"pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"Content is not visible via cross-origin resource sharing (CORS) files or headers","score_modifier":0},"redirection":{"expectation":"redirection-to-https","name":"redirection","output":{"destination":"https://benefriches-staging.osc-fr1.scalingo.io/","redirects":true,"route":["http://benefriches-staging.osc-fr1.scalingo.io/","https://benefriches-staging.osc-fr1.scalingo.io/"],"status_code":200},"pass":true,"result":"redirection-to-https","score_description":"Initial redirection is to HTTPS on same host, final destination is HTTPS","score_modifier":0},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","output":{"data":null,"http":false,"meta":false},"pass":true,"result":"referrer-policy-not-implemented","score_description":"Referrer-Policy header not implemented","score_modifier":0},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","output":{"data":"max-age=31536000","includeSubDomains":false,"max-age":31536000,"preload":false,"preloaded":false},"pass":true,"result":"hsts-implemented-max-age-at-least-six-months","score_description":"HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)","score_modifier":0},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","output":{"data":{"https://tally.so/widgets/embed.js":{"crossorigin":null,"integrity":null}}},"pass":false,"result":"sri-not-implemented-but-external-scripts-loaded-securely","score_description":"Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS","score_modifier":-5},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","output":{"data":"nosniff"},"pass":true,"result":"x-content-type-options-nosniff","score_description":"X-Content-Type-Options header set to \"nosniff\"","score_modifier":0},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","output":{"data":"DENY"},"pass":true,"result":"x-frame-options-implemented-via-csp","score_description":"X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive","score_modifier":5},"x-xss-protection":{"expectation":"x-xss-protection-disabled","name":"x-xss-protection","output":{"data":null},"pass":true,"result":"x-xss-protection-not-implemented","score_description":"Deprecated X-XSS-Protection header not implemented","score_modifier":0}}}