Nmap
Scan Summary :
Consulter le rapport détaillé
Mozilla HTTP observatory
Scan Summary :
| Impact | Description | Documentation |
Content Security Policy (CSP) header not implemented | Implement one, see MDN's Content Security Policy (CSP) documentation. |
Scan OWASP
| risk | name |
High (Medium) | Vulnerable JS Library |
Medium (High) | Content Security Policy (CSP) Header Not Set |
Medium (Medium) | Multiple X-Frame-Options Header Entries |
Medium (Medium) | Vulnerable JS Library |
Low (Medium) | Application Error Disclosure |
Low (Medium) | Cookie without SameSite Attribute |
Low (Medium) | Insufficient Site Isolation Against Spectre Vulnerability |
Low (Medium) | Permissions Policy Header Not Set |
Low (Low) | Full Path Disclosure |
Informational (High) | Authentication Request Identified |
Informational (High) | Sec-Fetch-Dest Header is Missing |
Informational (High) | Sec-Fetch-Mode Header is Missing |
Informational (High) | Sec-Fetch-Site Header is Missing |
Informational (High) | Sec-Fetch-User Header is Missing |
Informational (Medium) | Base64 Disclosure |
Informational (Medium) | Modern Web Application |
Informational (Medium) | Non-Storable Content |
Informational (Medium) | Session Management Response Identified |
Informational (Medium) | Storable and Cacheable Content |
Informational (Low) | Information Disclosure - Suspicious Comments |
Informational (Low) | Re-examine Cache-control Directives |
Informational (Low) | User Controllable HTML Element Attribute (Potential XSS) |