https://pilotage.inclusion.beta.gouv.fr
Valoriser et diffuser la donnée pour favoriser les dispositifs d'inclusion
Nmap
Scan Summary :
| severity | service | vulnerability |
info | http (port:80) | |
info | bgp (port:179) | |
info | https (port:443) | |
info | socks (port:1080) | |
info | pvuniwien (port:1081) | |
info | tcpwrapped (port:5001) | |
info | ssh (port:5002) | |
info | smtp (port:5221) | |
info | ssh (port:5357) | |
info | tcpwrapped (port:5666) | |
info | amqp (port:5800) | |
info | tcpwrapped (port:5902) | |
info | smtp (port:5961) | |
info | unknown (port:5962) | |
info | abyss (port:9999) |
Mozilla HTTP observatory
Scan Summary :
| Impact | Description | Documentation |
Subresource Integrity (SRI) not implemented, and external scripts are loaded over HTTP or use protocol-relative URLs via | Load external scripts over HTTPS, and add SRI to them. | |
Content Security Policy (CSP) header not implemented | Implement one, see MDN's Content Security Policy (CSP) documentation. |
Scan OWASP
| risk | name |
Medium (High) | Content Security Policy (CSP) Header Not Set |
Medium (High) | Sub Resource Integrity Attribute Missing |
Low (High) | Strict-Transport-Security Header Not Set |
Low (Medium) | Cookie No HttpOnly Flag |
Low (Medium) | Cross-Domain JavaScript Source File Inclusion |
Low (Medium) | Insufficient Site Isolation Against Spectre Vulnerability |
Low (Medium) | Permissions Policy Header Not Set |
Low (Medium) | X-Content-Type-Options Header Missing |
Informational (High) | Sec-Fetch-Dest Header is Missing |
Informational (High) | Sec-Fetch-Mode Header is Missing |
Informational (High) | Sec-Fetch-Site Header is Missing |
Informational (High) | Sec-Fetch-User Header is Missing |
Informational (Medium) | Base64 Disclosure |
Informational (Medium) | Modern Web Application |
Informational (Medium) | Session Management Response Identified |
Informational (Medium) | Storable and Cacheable Content |
Informational (Low) | Re-examine Cache-control Directives |