content-security-policy

Content Security Policy (CSP) implemented with unsafe sources inside style-src. This includes 'unsafe-inline', data: or overly broad sources such as https:.

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

cross-origin-resource-sharing

Content is visible via cross-origin resource sharing (CORS) files or headers, but is restricted to specific domains

public-key-pinning

HTTP Public Key Pinning (HPKP) header not implemented

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

Referrer-Policy header set to "no-referrer", "same-origin", "strict-origin" or "strict-origin-when-cross-origin"

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) is not needed since site contains no script tags

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive

x-xss-protection

X-XSS-Protection header not needed due to strong Content Security Policy (CSP) header

default-src 'none';base-uri 'self';font-src 'self' https: data:;frame-ancestors 'self';img-src 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=';connect-src api.trackdechets.beta.gouv.fr;form-action self;upgrade-insecure-requests

http

https

{"query": "query { companyInfos(siret: \"85001946400013\"){ isRegistered }}"}

Styled components is a CSS-in-JS styling framework that uses tagged template literals in JavaScript.

styled-components

React is an open-source JavaScript library for building user interfaces or UI components.

React

Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.

Lodash

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

https://api.trackdechets.beta.gouv.fr

Eco-index

GES: 1.4 gCO2e par visite

Eau : 2.1 cl par visite

Third parties