%23%23%20Contexte%0A%0APlusieurs%20entit%C3%A9s%20ont%20des%20obligations%20en%20mati%C3%A8re%20d%E2%80%99accessibilit%C3%A9%20num%C3%A9rique.%20Sont%20notamment%20concern%C3%A9s%2C%20en%20tout%20ou%20partie%2C%20par%20le%20RGAA%20%3A%0A%0A-%20les%20administrations%20des%20trois%20fonctions%20publiques%2C%20dont%20les%20collectivit%C3%A9s%20territoriales%20et%20l%E2%80%99%C3%89tat%2C%20ses%20services%20d%C3%A9concentr%C3%A9s%20et%20ses%20op%C3%A9rateurs%20%3B%0A-%20les%20organisations%20d%C3%A9l%C3%A9gataires%20d%E2%80%99une%20mission%20de%20service%20public%20ou%20sous%20contr%C3%B4le%20d%E2%80%99une%20administration%20%3B%0A-%20les%20entreprises%20dont%20le%20chiffre%20d%E2%80%99affaires%20en%20France%20est%20sup%C3%A9rieur%20%C3%A0%20250%20millions%20d%E2%80%99euros.%0A%0ALe%20constat%20%3A%20un%20%28tr%C3%A8s%29%20faible%20nombre%20de%20services%20num%C3%A9riques%20respectent%20ces%20obligations%2C%20malgr%C3%A9%20le%20risque%20de%20sanction.%0A%0A%23%23%20Probl%C3%A8me%28s%29%0A%0ANotre%20enjeu%20%3A%20am%C3%A9liorer%20l%E2%80%99accessibilit%C3%A9%20des%20services%20num%C3%A9riques%20%C3%A0%20travers%20leur%20mise%20en%20conformit%C3%A9.%0A%0AL%E2%80%99%5Bordonnance%20de%20transposition%20du%206%20septembre%202023%5D%28https%3A%2F%2Fwww.legifrance.gouv.fr%2Fjorf%2Fid%2FJORFTEXT000048049674%29%20d%C3%A9finit%20de%20nouvelles%20missions%20pour%20l%E2%80%99Arcom%20en%20cr%C3%A9ant%20l%E2%80%99%5Barticle%2047-1%20de%20la%20loi%20n%C2%B02005-102%5D%28https%3A%2F%2Fwww.legifrance.gouv.fr%2Floda%2Farticle_lc%2FLEGIARTI000048050174%29%2C%20qui%20pr%C3%A9cise%20%3A%0A%0A%3E%20%C2%AB%20Afin%20de%20faciliter%20le%20contr%C3%B4le%20de%20ces%20obligations%2C%20elle%20peut%20mettre%20en%20%C5%93uvre%20des%20m%C3%A9thodes%20proportionn%C3%A9es%20de%20collecte%20automatis%C3%A9e%20de%20donn%C3%A9es%20publiquement%20accessibles.%20%C2%BB%0A%3E%20%0A%0AMalgr%C3%A9%20des%20obligations%20l%C3%A9gales%20strictes%2C%20l%E2%80%99accessibilit%C3%A9%20num%C3%A9rique%20reste%20insuffisamment%20respect%C3%A9e.%20L%E2%80%99autorit%C3%A9%20de%20contr%C3%B4le%20n%E2%80%99a%20pas%20les%20outils%20n%C3%A9cessaires%20pour%20assurer%20le%20suivi%20des%20mises%20en%20conformit%C3%A9%2C%20et%20les%20organisations%20concern%C3%A9es%20manquent%20de%20moyens%20pour%20s%E2%80%99auto-%C3%A9valuer%20vis%20%C3%A0%20vis%20du%20RGAA%0A%0A%23%23%20Notre%20hypoth%C3%A8se%20de%20travail%0A%0APour%20acc%C3%A9l%C3%A9rer%20leur%20mise%20en%20conformit%C3%A9%2C%20il%20faut%20permettre%20aux%20services%20num%C3%A9riques%20de%20visualiser%20simplement%20le%20respect%20de%20leurs%20obligations%20l%C3%A9gales%20en%20tout%20ou%20partie%20et%20d%E2%80%99en%20suivre%20l%E2%80%99%C3%A9volution.%0A%0A%23%23%20Nos%20leviers%20d%E2%80%99action%0A%0A%23%23%23%20%2A%2ALevier%201%C2%A0%3A%20Renforcer%20le%20contr%C3%B4le%20et%20acc%C3%A9l%C3%A9rer%20la%20mise%20en%20conformit%C3%A9%2A%2A%0A%0A%2A%2AObjectif%2A%2A%20%3A%20Augmenter%20le%20nombre%20de%20mises%20en%20conformit%C3%A9%20du%20fait%20de%20la%20g%C3%A9n%C3%A9ralisation%20des%20contr%C3%B4les.%0A%0A%2A%2AComment%20%3F%2A%2A%20%0A%0AEn%20renfor%C3%A7ant%20les%20capacit%C3%A9s%20de%20l%E2%80%99Arcom%20pour%20%3A%0A%0A-%20%2A%2AD%C3%A9tecter%2A%2A%20automatiquement%20les%20sites%20non%20conformes%20%3B%0A-%20%2A%2ANotifier%2A%2A%20les%20responsables%20de%20la%20situation%20et%20des%20risques%20encourus%20%3B%0A-%20%2A%2ASuivre%2A%2A%20les%20actions%20de%20mise%20en%20conformit%C3%A9%20et%2C%20si%20n%C3%A9cessaire%2C%20engager%20des%20sanctions.%0A%0A%23%23%23%20Levier%202%20%3A%20Faciliter%20l%E2%80%99autocontr%C3%B4le%20par%20les%20responsables%20de%20portefeuille%20et%20chefs%20de%20produits%20num%C3%A9riques%0A%0A%2A%2AObjectif%2A%2A%20%3A%20Encourager%20les%20%C3%A9quipes%20en%20charge%20des%20services%20num%C3%A9riques%20%C3%A0%20prendre%20en%20main%20leur%20conformit%C3%A9.%0A%0A%2A%2AComment%20%3F%2A%2A%20En%20leur%20donnant%20les%20moyens%20de%20%3A%0A%0A-%20%2A%2APrendre%20conscience%2A%2A%20de%20leurs%20obligations%20en%20mati%C3%A8re%20d%E2%80%99accessibilit%C3%A9%20num%C3%A9rique%20%3B%0A-%20%2A%2AIdentifier%20rapidement%2A%2A%20les%20points%20d%E2%80%99am%C3%A9lioration%20prioritaires%20%3B%0A-%20%2A%2AD%C3%A9couvrir%2A%2A%20des%20moyens%20de%20formation.%0A%0AAfin%20de%20%3A%0A%0A-%20%2A%2AD%C3%A9finir%20un%20plan%20d%E2%80%99action%20concret%2A%2A%2C%20avec%20des%20%C3%A9tapes%20claires%20et%20r%C3%A9alisables%20%3B%0A-%20%2A%2AMettre%20en%20%C5%93uvre%20les%20corrections%20n%C3%A9cessaires%2A%2A%20et%20suivre%20leur%20progression%20%3B%0A-%20%2A%2AR%C3%A9aliser%20un%20auto-contr%C3%B4le%20r%C3%A9gulier%2A%2A%20pour%20garantir%20une%20am%C3%A9lioration%20continue%20%3B%0A-%20%2A%2AAm%C3%A9liorer%20leurs%20comp%C3%A9tences%2A%2A%20dans%20le%20domaine%20de%20l%E2%80%99accessibilit%C3%A9%20num%C3%A9rique.%0A%0A%23%23%20Notre%20solution%0A%0A%2A%2AAcc%C3%A8s%20Cible%2A%2A%20est%20un%20service%20num%C3%A9rique%20permettant%20de%20v%C3%A9rifier%20automatiquement%20le%20respect%20%3A%0A%0A-%20des%20obligations%20de%20transparence%20en%20mati%C3%A8re%20d%E2%80%99accessibilit%C3%A9%20num%C3%A9rique%20%3B%0A-%20d%E2%80%99une%20partie%20des%20crit%C3%A8res%20de%20conformit%C3%A9%20%C3%A0%20l%E2%80%99accessibilit%C3%A9.%0A%0A%23%23%20Nos%20objectifs%20d%E2%80%99impact%0A%0ANous%20piloterons%20%3A%0A%0A-%20le%20nombre%20de%20services%20inform%C3%A9s%20par%20l%E2%80%99Arcom%20%3B%0A-%20le%20nombre%20de%20services%20auto-contr%C3%B4l%C3%A9s%20%3B%0A-%20le%20nombre%20de%20plans%20d%E2%80%99action%20d%C3%A9finis%20%28d%C3%A9claratif%29%20%3B%0A-%20l%E2%80%99%C3%A9volution%2C%20dans%20le%20temps%20%28%C3%A0%20intervalle%20r%C3%A9gulier%29%2C%20du%20taux%20d%E2%80%99accessibilit%C3%A9%20des%20services%20ayant%20r%C3%A9alis%C3%A9%20un%20test.%0A%0AUn%20%C3%A9chantillon%20de%20contr%C3%B4le%20%28services%20non%20test%C3%A9s%20par%20Acc%C3%A8s%E2%80%99Cible%29%20sera%20%C3%A9galement%20r%C3%A9alis%C3%A9%20pour%20%C3%A9valuer%20l%E2%80%99impact%20du%20dispositif.%0A%0A%23%23%20Construction%20%231%0A%0ALes%20efforts%20portent%20sur%20la%20construction%20d%E2%80%99un%20produit%20minimum%20viable%20en%20collaboration%20avec%20l%E2%80%99Arcom.%20%0A%0ALes%20premiers%20retours%20sont%20encourageants%20%28potentiel%20de%20multiplier%20par%20quatre%20le%20nombre%20de%20sites%20suivis%2C%20gain%20de%20temps%20pour%20contribuer%20au%20reporting%20europ%C3%A9en%29%2C%20mais%20le%20produit%20n%C3%A9cessite%20encore%20quelques%20%C3%A9volutions.%0A%0A%23%23%20Construction%20%232%0A%0ALes%20objectifs%20%3A%20%0A%0A-%20Finalisation%20du%20MVP%0A-%20Prise%20en%20main%20par%20l%E2%80%99ARCOM%0A-%20Adaptation%20de%20l%E2%80%99outil%20pour%20l%E2%80%99auto-contr%C3%B4le

committee

Acces cible

investigation

construction

default-src 'self'; font-src 'self'; img-src 'self' data:; object-src 'none'; script-src 'self' 'nonce-'; style-src 'self' 'nonce-'

Diagnostics

Metrics

http

https

_acces_cible_session

Accès Cible

Ruby is an open-source object-oriented programming language.

Ruby

Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.

Ruby on Rails

OVHcloud is a global, cloud provider delivering hosted private cloud, public cloud, and dedicated server solutions.

OVHcloud

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

CSP: Failure to Define Directive with No Fallback

CSP: Notices

Insufficient Site Isolation Against Spectre Vulnerability

Permissions Policy Header Not Set

X-Content-Type-Options Header Missing

Base64 Disclosure

Content-Type Header Missing

Information Disclosure - Suspicious Comments

Modern Web Application

Non-Storable Content

Re-examine Cache-control Directives

Sec-Fetch-Dest Header is Missing

Sec-Fetch-Mode Header is Missing

Sec-Fetch-Site Header is Missing

Sec-Fetch-User Header is Missing

Session Management Response Identified

Storable and Cacheable Content

default-src 'self'; script-src 'self' 'unsafe-inline' https://stats.beta.gouv.fr https://*.contentsquare.net https://sentry.anct.cloud-ed.fr; connect-src 'self' https://api.collectivite.fr https://stats.beta.gouv.fr https://*.contentsquare.net https://sentry.anct.cloud-ed.fr https://quotient-familial.numerique.gouv.fr https://datanova.laposte.fr https://data-api.publication-actes.fr https://data-api.megalis.bretagne.bzh; worker-src 'self' blob:;; frame-src 'self' https://data.megalis.bretagne.bzh https://publication-actes.fr; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://annuaire-des-collectivites-production-storage.s3.fr-par.scw.cloud https://*.contentsquare.net; font-src 'self' https:; object-src 'none'; upgrade-insecure-requests

_pk_id.118.88ba

_cs_s

_pk_ses.118.88ba

_cs_id

_cs_c

Magento is an open-source ecommerce platform written in PHP.

Magento

Sentry is an open-source platform for workflow productivity, aggregating errors from across the stack in real time.

Sentry

MySQL is an open-source relational database management system.

MySQL

PHP is a general-purpose scripting language used for web development.

Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.

Vue.js

Astro is a new JavaScript-based static site builder.

Astro

Matomo Analytics is a free and open-source web analytics application, that runs on a PHP/MySQL web-server.

Matomo Analytics

Hotjar is a suite of analytic tools to assist in the gathering of qualitative data, providing feedback through tools such as heatmaps, session recordings, and surveys.

Hotjar

Contentsquare is an enterprise-level UX optimisation platform.

Contentsquare

Tally is the simplest way to create free forms & surveys. Create any type of form in seconds, without knowing how to code, and for free.

Tally

CSP: Wildcard Directive

CSP: script-src unsafe-inline

CSP: style-src unsafe-inline

Secure Pages Include Mixed Content

Timestamp Disclosure - Unix

Storable but Non-Cacheable Content

Content Security Policy (CSP) Header Not Set

TS01ffdb6c

BIGipServer34MTuypDk3zboBHeznTQiA

Sendinblue is an email marketing solution for small and medium-sized businesses that want to send and automate email marketing campaigns.

Sendinblue

Absence of Anti-CSRF Tokens

Cookie No HttpOnly Flag

Cookie Without Secure Flag

Cookie without SameSite Attribute

Strict-Transport-Security Header Not Set

Retrieved from Cache

Missing Anti-clickjacking Header

Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.

Nginx

Cross-Domain Misconfiguration

Server Leaks Version Information via "Server" HTTP Response Header Field

default-src 'self'; script-src 'self' https://stats.beta.gouv.fr 'nonce-YjY4NjIxM2YtZmUzMy00ZGZjLWJhNzEtMzEzZDNiODM1ZDg4' 'strict-dynamic' ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' blob: data: https://cdn.plusfraichemaville.fr/ https://plusfraichemaville.s3.fr-par.scw.cloud/ https://*.basemaps.cartocdn.com https://*.hsforms.com https://data.geopf.fr https://*.hubspot.com; font-src 'self' https://fonts.gstatic.com/; object-src 'none'; base-uri 'self'; form-action 'self'; frame-src https://stats.plusfraichemaville.fr; frame-ancestors 'none'; upgrade-insecure-requests; connect-src 'self' https://sentry.incubateur.net/ https://stats.beta.gouv.fr/matomo.php https://api-adresse.data.gouv.fr/search/ https://*.hscollectedforms.net;

__Secure-next-auth.callback-url

__Host-next-auth.csrf-token

Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.

Node.js

React is an open-source JavaScript library for building user interfaces or UI components.

React

Next.js is a React framework for developing single page Javascript applications.

Next.js

Priority Hints exposes a mechanism for developers to signal a relative priority for browsers to consider when fetching resources.

Priority Hints

GoDaddy is used as a web host and domain registrar.

GoDaddy

Webpack is an open-source JavaScript module bundler.

Webpack

Progressive Web Apps (PWAs) are web apps built and enhanced with modern APIs to deliver enhanced capabilities, reliability, and installability while reaching anyone, anywhere, on any device, all with a single codebase.

Open Graph is a protocol that is used to integrate any web page into the social graph.

Open Graph

Module Federation is a webpack technology for dynamically loading parts of other independently deployed builds.

Module Federation

Private IP Disclosure

Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s)

User Controllable HTML Element Attribute (Potential XSS)

%23%23%20Le%20probl%C3%A8me%0A%0AEn%202021%2C%20l%27%C3%A9quipe%20rdv-insertion%20constate%20que%20les%20parcours%20d%E2%80%99insertion%20sont%20longs%20et%20peu%20suivis%20%3A%0A%0A-%20Fort%20taux%20d%E2%80%99absent%C3%A9isme%20aux%20rendez-vous%20contractuels%20du%20parcours%20%28ex%20%3A%2050%25%20en%20moyenne%20selon%20l%27OARSA%20en%202019%29%0A-%20D%C3%A9lais%20trop%20longs%20%28ex%20%3A%20d%C3%A9lai%20moyen%20d%E2%80%99orientation%20des%20BRSA%20de%2095%20jours%20en%202019%29%0A-%20Risque%20de%20rupture%20de%20parcours%20post-signature%20CER%20%C3%A9lev%C3%A9%0A%0ADepuis%20la%20promulgation%20de%20la%20Loi%20Plein%20Emploi%20en%202023%2C%20des%20enjeux%20compl%C3%A9mentaires%20apparaissent%20%3A%20%0A-%20N%C3%A9cessit%C3%A9%20de%20partage%20de%20donn%C3%A9es%20via%20API%20entre%20les%20conseils%20d%C3%A9partementaux%20et%20France%20Travail%0A-%20Gestion%20de%20flux%20entrants%20et%20sortants%20de%20BRSA%20entre%20les%20conseils%20d%C3%A9partementaux%20et%20les%20agences%20France%20Travail%0A%0A%23%23%20Notre%20service%0A%0AMis%20%C3%A0%20disposition%20des%20conseils%20d%C3%A9partementaux%20en%20charge%20du%20versement%20de%20l%27allocation%20RSA%20et%20de%20l%27accompagnement%20des%20b%C3%A9n%C3%A9ficiaires%2C%20le%20service%20permet%20%3A%0A%0A1.%20D%27importer%20un%20flux%20de%20b%C3%A9n%C3%A9ficiaires%20du%20RSA%20%28%C3%A9mis%20par%20la%20CAF%29%20afin%20de%20les%20inviter%20%28par%20mail%2Fsms%2Fcourrier%29%20%C3%A0%20choisir%20le%20plus%20rapidement%20possible%20un%20cr%C3%A9neau%20de%20rendez-vous%2C%20quel%20que%20soit%20le%20motif%20%3A%20orientation%2C%20signature%20du%20contrat%20d%27engagement%2C%20accompagnement%2C%20action%20sp%C3%A9cifique%20d%E2%80%99insertion%2C%20suivi%20en%20IAE%2C%20suspension%20etc...%0A2.%20De%20s%27assurer%20de%20la%20prise%20des%20rendez-vous%20ainsi%20que%20de%20la%20bonne%20tenue%20des%20ces%20derniers%20%28rappels%20SMS%29%20gr%C3%A2ce%20%C3%A0%20une%20interface%20de%20suivi%20et%20de%20pilotage%20o%C3%B9%20les%20rendez-vous%20sont%20class%C3%A9s%20en%20listes%20selon%20leur%20motif%20et%20pourvus%20d%27un%20statut%20mis%20%C3%A0%20jour%20automatiquement.%0A3.%20De%20communiquer%2C%20d%C3%A8s%20la%20fin%20de%20l%27entretien%20d%27orientation%2C%20la%20date%20et%20l%27heure%20du%20prochain%20rendez-vous%20au%20b%C3%A9n%C3%A9ficiaire%20du%20RSA%20gr%C3%A2ce%20%C3%A0%20une%20vue%20instantan%C3%A9e%20sur%20les%20cr%C3%A9neaux%20disponibles%20%C3%A0%20venir.%0A3.%20De%20garantir%20la%20continuit%C3%A9%20des%20parcours%20d%27accompagnement%20gr%C3%A2ce%20%C3%A0%20la%20prescription%20de%20rendez-vous%20entre%20partenaires%20du%20RPE%20%28CD%2C%20d%C3%A9l%C3%A9gataires%2C%20partenaires%20FT%29%0A4.%20De%20partager%20les%20donn%C3%A9es%20de%20rendez-vous%20produites%20par%20le%20service%20gr%C3%A2ce%20%C3%A0%20notre%20API%2C%20afin%20d%27alimenter%20les%20dossiers%20usagers%20au%20sein%20des%20logiciels%20d%27action%20sociale%20et%20de%20parcours%20ainsi%20que%20des%20outils%20France%20Travail.%0A%0A%23%23%20Nos%20usagers%0A%0A-%20Les%20personnes%20en%20insertion%20%28ex.%20BRSA%2C%20salari%C3%A9s%20en%20IAE%2C%20etc.%29%0A-%20Les%20agents%20en%20charge%20de%20l%E2%80%99organisation%20des%20rendez-vous%20d%E2%80%99insertion%20%28dans%20les%20CD%20et%20structures%20partenaires%29%0A%0A%23%23%20Notre%20impact%0A%0Ardv-insertion%20aura%20r%C3%A9ussi%20sa%20mission%20si%20%3A%0A%0A1.%20les%20d%C3%A9lais%20avant%20l%27orientation%20des%20BRSA%20%2895%20jours%20selon%20%5C%5Bl%27enqu%C3%AAte%20OARSA%202019%20%28tableau%20A6%29%5D%20de%20la%20DREES%29%20et%20de%20l%27orientation%20jusqu%27%C3%A0%20l%27accompagnement%20ont%20%C3%A9t%C3%A9%20r%C3%A9duits%20%2853%20jours%20en%20moyenne%20entre%20l%27orientation%20et%20la%20signature%20d%27un%20contrat%20d%27engagement%20r%C3%A9ciproque%20%28CER%29%20selon%20la%20m%C3%AAme%20enqu%C3%AAte%29%20%3B%0A2.%20un%20plus%20grand%20nombre%20de%20personnes%20en%20insertion%20sont%20accompagn%C3%A9es%20%3B%0A3.%20la%20qualit%C3%A9%20de%20l%27accompagnement%20est%20am%C3%A9lior%C3%A9e%2C%20vers%20des%20solutions%20plus%20individualis%C3%A9es%20et%20adapt%C3%A9es.%0A%0ARetrouvez%20notre%20page%20statistiques%20%5Bici%5D%28https%3A%2F%2Fwww.rdv-insertion.fr%2Fstats%29.%0A%0ANotre%20%2A%2A%5Bcarte%20de%20suivi%5D%28https%3A%2F%2Fwww.rdv-insertion.fr%2Fstats%2Fdeployment_map%29%2A%2A%20permet%20de%20suivre%20l%27avanc%C3%A9e%20de%20%2A%2Anos%20travaux%2A%2A%20dans%20chaque%20d%C3%A9partement%2C%20et%20de%20conna%C3%AEtre%20le%20degr%C3%A9%20de%20maturit%C3%A9%20du%20conseil%20d%C3%A9partemental%20dans%20l%E2%80%99int%C3%A9gration%20et%20l%E2%80%99exploitation%20des%20flux%20de%20donn%C3%A9es%20existants.%0A

rdv-insertion

acceleration

default-src 'self'; font-src 'self' data: *.crisp.chat wss://client.relay.crisp.chat; img-src 'self' data: rdv-insertion-medias-production.s3.fr-par.scw.cloud *.crisp.chat wss://client.relay.crisp.chat flo.uri.sh public.flourish.studio matomo.inclusion.beta.gouv.fr; media-src 'self' rdv-insertion-medias-production.s3.fr-par.scw.cloud; frame-src 'self' flo.uri.sh public.flourish.studio tally.so; object-src 'none'; script-src 'self' matomo.inclusion.beta.gouv.fr *.crisp.chat wss://client.relay.crisp.chat flo.uri.sh public.flourish.studio tally.so sentry.incubateur.net 'nonce-GgrxxQSvbNrkqfnHZix3dQ=='; style-src 'self' 'unsafe-inline' *.crisp.chat wss://client.relay.crisp.chat; connect-src 'self' https://www.rdv-solidarites.fr sentry.incubateur.net matomo.inclusion.beta.gouv.fr tally.so *.crisp.chat wss://client.relay.crisp.chat; form-action 'self' https://www.rdv-solidarites.fr; frame-ancestors 'self' https://www.rdv-solidarites.fr matomo.inclusion.beta.gouv.fr; worker-src 'self' blob:

_rdv_insertion_session

default-src 'self'; font-src 'self' data: *.crisp.chat wss://client.relay.crisp.chat; img-src 'self' data: rdv-insertion-medias-production.s3.fr-par.scw.cloud *.crisp.chat wss://client.relay.crisp.chat flo.uri.sh public.flourish.studio matomo.inclusion.beta.gouv.fr; media-src 'self' rdv-insertion-medias-production.s3.fr-par.scw.cloud; frame-src 'self' flo.uri.sh public.flourish.studio tally.so; object-src 'none'; script-src 'self' matomo.inclusion.beta.gouv.fr *.crisp.chat wss://client.relay.crisp.chat flo.uri.sh public.flourish.studio tally.so sentry.incubateur.net 'nonce-7to2AzVp1rcWB7Bn72c43w=='; style-src 'self' 'unsafe-inline' *.crisp.chat wss://client.relay.crisp.chat; connect-src 'self' https://www.rdv-solidarites.fr sentry.incubateur.net matomo.inclusion.beta.gouv.fr tally.so *.crisp.chat wss://client.relay.crisp.chat; form-action 'self' https://www.rdv-solidarites.fr; frame-ancestors 'self' https://www.rdv-solidarites.fr matomo.inclusion.beta.gouv.fr; worker-src 'self' blob:

A modest JavaScript framework for the HTML you already have.

Stimulus

Turbo is a JavaScript framework for building fast web applications.

Turbo

Matomo Tag Manager manages tracking and marketing tags.

Matomo Tag Manager

Calendly is an app for scheduling appointments, meetings, and events.

Calendly

Sub Resource Integrity Attribute Missing

Cross-Domain JavaScript Source File Inclusion

Zurb Foundation is used to prototype in the browser. Allows rapid creation of websites or applications while leveraging mobile and responsive technology. The front end framework is the collection of HTML, CSS, and Javascript containing design patterns.

ZURB Foundation

Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.

Select2

Modernizr is a JavaScript library that detects the features available in a user's browser.

Modernizr

lit-html is a simple, modern, safe, small and fast HTML templating library for JavaScript.

lit-html

lit-element is a simple base class for creating web components that work in any web page with any framework. lit-element uses lit-html to render into shadow DOM, and adds API to manage properties and attributes.

lit-element

jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.

jQuery UI

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

Tableau de bord : startup