%23%23%20Le%20probl%C3%A8me%0A%0ADe%20nombreux%20acteurs%20interviennent%20pour%20le%20suivi%20des%20d%C3%A9marches%20mini%C3%A8res.%20Il%20est%20n%C3%A9cessaire%20d%27avoir%20un%20outils%20de%20gestion%20unifi%C3%A9%20pour%20r%C3%A9unir%20l%27ensemble%20des%20ces%20acteurs%20autour%20de%20la%20vie%20des%20projets%20miniers.%0A%0A%23%23%20La%20solution%0A%0ACamino%20%3A%20le%20%2Acadastre%20minier%20num%C3%A9rique%20ouvert%2A%2C%20ambitionne%20d%27ouvrir%20les%20donn%C3%A9es%20du%20domaine%20minier%20pour%20partager%20l%27information%20sur%20les%20projets%20et%20faciliter%20leur%20gestion.%0A%0AAvec%20Camino%2C%20il%20est%20enfin%20possible%2C%20pour%20tous%20les%20utilisateurs%2C%20de%20consulter%20les%20titres%20miniers%20et%20leurs%20caract%C3%A9ristiques%20sur%20une%20carte%20%C3%A0%20jour%20et%20de%20suivre%20les%20projets%20en%20cours%20sur%20un%20tableau%20de%20bord.%0AAvec%20ce%20r%C3%A9f%C3%A9rentiel%20commun%20ouvert%20et%20partag%C3%A9%20des%20dossiers%20miniers%20et%20des%20autorisations%20administratives%20associ%C3%A9es%2C%20Camino%20r%C3%A9soud%20les%20difficult%C3%A9s%20de%20ses%203%20utilisateurs%20principaux%20%3A%20les%20entreprises%2C%20les%20citoyens%20et%20les%20agents%20publics%20%3A%0A%0A%20-%20%2A%2ALes%20entreprises%20mini%C3%A8res%2A%2A%20peuvent%20connaitre%20l%E2%80%99%C3%A9tat%20du%20domaine%20minier%20puis%20d%C3%A9poser%20en%20ligne%20leurs%20demandes%2C%20les%20rapports%20et%20les%20donn%C3%A9es%20r%C3%A9glementaires.%20Elles%20peuvent%20aussi%20visualiser%20l%E2%80%99avancement%20des%20instructions%2C%20suivre%20leur%20portefeuille%20de%20titres%20et%20r%C3%A9pondre%20simplement%20%C3%A0%20leurs%20obligations%20%C3%A0%20chaque%20%C3%A9tape%20des%20projets.%0A%20-%20%2A%2ALes%20agents%20publics%2A%2A%20peuvent%20simplement%20acc%C3%A9der%20aux%20m%C3%AAmes%20dossiers%20et%20donn%C3%A9es%20partag%C3%A9s%20entre%20les%20services%20des%20administrations%20et%20op%C3%A9rateurs%20publics.%20Il%20est%20possible%20de%20co-instruire%20les%20demandes%2C%20de%20suivre%20et%20anticiper%20chaque%20moment%20de%20vie%20d%E2%80%99un%20projet%2C%20de%20trouver%20et%20valoriser%20les%20donn%C3%A9es%20sur%20le%20domaine%20minier%20national%20simplement%20et%20sans%20interm%C3%A9diaire.%0A%20-%20%2A%2ALes%20ONG%2C%20les%20citoyens%20et%20leurs%20%C3%A9lus%2A%2A%20peuvent%20consulter%20%C3%A0%20tout%20moment%20les%20dossiers%20et%20les%20donn%C3%A9es%20publiques%2C%20%C3%A0%20l%E2%80%99%C3%A9chelle%20de%20leur%20territoire%20pour%20mieux%20contribuer%2C%20sans%20pr%C3%A9cipitation%2C%20aux%20proc%C3%A9dures%20de%20participation%20du%20public%20et%20suivre%20de%20mani%C3%A8re%20transparente%20l%E2%80%99actualit%C3%A9%20des%20projets.%0A%0A%20%3Ca%20href%3D%22https%3A%2F%2Fcamino.beta.gouv.fr%2F%22%20target%3D%22_top%22%3ED%C3%A9couvrez%20ce%20produit%21%3C%2Fa%3E%0A%0A%23%23%20L%27impact%0A%0ACamino%20en%202022%20c%27est%20%3A%0A%20-%20%2A%2A8%2C6%2F10%2A%2A%20pour%20la%20satisfaction%20utilisateurs%0A%20-%20%2A%2A236%2A%2A%20notifications%20de%20suivi%20d%27instruction%20envoy%C3%A9es%20automatiquement%20aux%20services%20et%20op%C3%A9rateurs%0A%20-%20%2A%2A383%2A%2A%20comptes%20utilisateur%20activ%C3%A9s%0A%20%0A%20Les%20objectifs%20pour%202023%3A%0A%20-%20%2A%2A100%25%2A%2A%20des%20proc%C3%A9dures%20d%E2%80%99octroi%20et%20de%20prolongation%20des%20concessions%20et%20PER%20pouvant%20%C3%AAtre%20instruites%20conform%C3%A9ment%20%C3%A0%20la%20r%C3%A9forme%20du%20code%20minier%0A%20-%20%2A%2A80%25%2A%2A%20des%20usagers%20op%C3%A9rateurs%20miniers%20et%20agents%20d%E2%80%99administration%20disposant%20d%E2%80%99un%20tableau%20de%20bord%20de%20leur%20activit%C3%A9%0A%20-%20%2A%2A100%25%2A%2A%20des%20PEX%20g%C3%A9othermie%20valides%20en%20ligne%20avec%20leur%20donn%C3%A9es%20sp%C3%A9cifiques%20%28volume%20d%E2%80%99exploitation%2C%20puissance%2C%20etc%29%0A%20-%20%2A%2A500%2A%2A%20notifications%20de%20suivi%20d%E2%80%99instruction%2C%20adress%C3%A9es%20aux%20services%20et%20aux%20op%C3%A9rateurs.%0A%20%0A%20Pour%20voir%20les%20diff%C3%A9rentes%20statistiques%20de%20Camino%2C%20c%27est%20%3Ca%20href%3D%22https%3A%2F%2Fcamino.beta.gouv.fr%2Fstatistiques%2Fglobales%22%20target%3D%22_top%22%3Eici%3C%2Fa%3E%0A%0A%0AVous%20%C3%AAtes%20en%20charge%20de%20dossiers%20miniers%2C%20vous%20%C3%AAtes%20int%C3%A9ress%C3%A9s%20pour%20participer%20%C3%A0%20l%27am%C3%A9lioration%20de%20ce%20service%20%3F%20%3Ca%20href%3D%22mailto%3Acontact%40camino.beta.gouv.fr%3FSubject%3DCamino%2520m%27int%C3%A9resse%2520%21%22%20target%3D%22_top%22%3EContactez-nous%20%21%3C%2Fa%3E%0A

Camino

investigation

construction

acceleration

transfer

This shell command depends on an uncontrolled absolute path.

Shell command built from environment values

js/shell-command-injection-from-environment

CodeQL

External links without noopener/noreferrer are a potential security risk.

js/unsafe-external-link

This route handler performs a file system access, but is not rate-limited.

js/missing-rate-limiting

The hard-coded value "postgres" is used as user name.

js/hardcoded-credentials

This replaces only the first occurrence of "'".

js/incomplete-sanitization

content-security-policy

Content Security Policy (CSP) header not implemented

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

cross-origin-resource-sharing

Public content is visible via cross-origin resource sharing (CORS) Access-Control-Allow-Origin header

public-key-pinning

HTTP Public Key Pinning (HPKP) header not implemented

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) is not needed since site contains no script tags

x-content-type-options

X-Content-Type-Options header not implemented

x-frame-options

X-Frame-Options (XFO) header not implemented

x-xss-protection

http

arepa-cas

An NS record was detected. An NS record delegates a subdomain to a set of name servers.

NS Record Detection

DNS SaaS Service Detection

A DNS TXT record was detected. The TXT record lets a domain admin leave notes on a DNS server.

DNS TXT Record Detected

A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.

CAA Record

An MX record was detected. MX records direct emails to a mail exchange server.

MX Record Detection

Wappalyzer Technology Detection

This template searches for missing HTTP security headers. The impact of these missing headers can vary.


HTTP Missing Security Headers

GraphQL API Detection

WAF Detection

OpenSSH Service - Detect

Extract the issuer's organization from the target's certificate. Issuers are entities which sign and distribute certificates.


Detect SSL Certificate Issuer

Extract the Subject Alternative Name (SAN) from the target's certificate. SAN facilitates the usage of additional hostnames with the same certificate.


SSL DNS Names

TLS version detection is a security process used to determine the version of the Transport Layer Security (TLS) protocol used by a computer or server.
It is important to detect the TLS version in order to ensure secure communication between two computers or servers.


TLS Version - Detect

React is an open-source JavaScript library for building user interfaces or UI components.

React

Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.

Nginx

Mailjet is an email delivery service for marketing and developer teams.

Mailjet

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

https://api.camino.beta.gouv.fr

Eco-index

GES: 1.6 gramme(s) par visite

Eau : 2.4 cl par visite

Ça veut dire quoi ?

Third parties