content-security-policy

Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) header set to SAMEORIGIN or DENY

x-xss-protection

Deprecated X-XSS-Protection header set to "1; mode=block"

upgrade-insecure-requests; default-src https: data: blob: ; object-src https: data: 'unsafe-inline'; style-src https: data: 'unsafe-inline' ; script-src https: data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:;

Diagnostics

Metrics

Debian is a Linux software which is a free open-source software.

Debian

YunoHost is a server operating system that is free and open-source, allowing users to host their own web applications, email services, and other online tools. It is based on Debian GNU/Linux.

YunoHost

Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.

Nginx

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jQuery

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

Open Graph is a protocol that is used to integrate any web page into the social graph.

Type	URL	Remédiation
google fonts	fonts.googleapis.com/css?...	Host the font locally with https://github.com/neverpanic/google-font-download or https://google-webfonts-helper.herokuapp.com/
unknown	iandavis.com/2006/foaf-ic...
unknown	i.creativecommons.org/l/b...
unknown	blogantipub.files.wordpre...
unknown	licensebuttons.net/l/by-s...

Hostname	IP	City	Country
iandavis.com	94.130.88.32	?	Allemagne
fonts.googleapis.com	142.251.32.42	?	États Unis
i.creativecommons.org	172.67.34.140	?	États Unis
blogantipub.files.wordpress.com	192.0.72.29	San Francisco	États Unis
fonts.gstatic.com	172.217.12.99	?	États Unis
licensebuttons.net	172.67.7.63	?	États Unis
arthur.lutz.im	91.170.138.84	Nantes	France

https://arthur.lutz.im

LightHouse

https://arthur.lutz.im/

Scripts tiers et cookies