content-security-policy

Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) header set to SAMEORIGIN or DENY

x-xss-protection

Deprecated X-XSS-Protection header set to "1; mode=block"

Diagnostics

Metrics

Websites that have a shopping cart or checkout page, either using a known ecommerce platform or a custom solution.

Cart Functionality

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.

WordPress

MySQL is an open-source relational database management system.

MySQL

PHP is a general-purpose scripting language used for web development.

Debian is a Linux software which is a free open-source software.

Debian

YunoHost is a server operating system that is free and open-source, allowing users to host their own web applications, email services, and other online tools. It is based on Debian GNU/Linux.

YunoHost

Leaflet is the open-source JavaScript library for mobile-friendly interactive maps.

Leaflet

CyberChimps Responsive is a modern, lightweight, fully customizable, fast and responsive WordPress theme.

CyberChimps Responsive

Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.

Nginx

Twitter is a 'microblogging' system that allows you to send and receive short posts called tweets.

Twitter

Twitter Ads is an advertising platform for Twitter 'microblogging' system.

Twitter Ads

Livefyre is a platform that integrates with the social web to boost social interaction.

Livefyre

Unpkg is a content delivery network for everything on npm.

Unpkg

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

RSS is a family of web feed formats used to publish frequently updated works—such as blog entries, news headlines, audio, and video—in a standardized format.

Type	URL	Remédiation
unpkg	unpkg.com/leaflet@1.0.3/d...	Host files locally
unknown	www.cartographiepublicita...
twitter	platform.twitter.com/widg...	Dont embed twitter scripts, use your own tweet embed

Hostname	IP	City	Country
unpkg.com	104.16.124.175	?	?
www.cartographiepublicitaire.org	172.67.222.248	?	États Unis
platform.twitter.com	146.75.36.157	?	États Unis
syndication.twitter.com	104.244.42.8	?	États Unis
cartographiepublicitaire.eu.org	51.159.70.213	Paris	France

https://cartographiepublicitaire.eu.org

LightHouse

https://cartographiepublicitaire.eu.org/

Scripts tiers et cookies