This replacement may produce '\' characters that are double-unescaped here.

js/double-escaping

CodeQL

DOM text is reinterpreted as HTML without escaping meta-characters.

js/xss-through-dom

DOM text is reinterpreted as HTML without escaping meta-characters.
DOM text is reinterpreted as HTML without escaping meta-characters.
DOM text is reinterpreted as HTML without escaping meta-characters.

CSRF vulnerability due to protection being disabled.

java/spring-disabled-csrf-protection

content-security-policy

Content Security Policy (CSP) implemented with unsafe sources inside style-src. This includes 'unsafe-inline', data: or overly broad sources such as https:.

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

All cookies use the Secure flag, session cookies use the HttpOnly flag, and cross-origin restrictions are in place via the SameSite flag

cross-origin-resource-sharing

Content is visible via cross-origin resource sharing (CORS) file or headers

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) is only needed for html resources

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive

x-xss-protection

Deprecated X-XSS-Protection header set to "0" (disabled)

frame-ancestors 'none'; frame-src 'none'; child-src 'none'; upgrade-insecure-requests; default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; object-src 'none'; img-src 'self' data:; font-src 'self'; connect-src *.dossierfacile.fr *.dossierfacile.fr:*; base-uri 'self'; form-action 'none'; media-src 'none'; worker-src 'none'; manifest-src 'none'; prefetch-src 'none';

http

https

A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.

CAA Record

DNS SaaS Service Detection

Allowed Options Method

This template searches for missing HTTP security headers. The impact of these missing headers can vary.


HTTP Missing Security Headers

CORS Misconfiguration

Extract the issuer's organization from the target's certificate. Issuers are entities which sign and distribute certificates.


Detect SSL Certificate Issuer

Extract the Subject Alternative Name (SAN) from the target's certificate. SAN facilitates the usage of additional hostnames with the same certificate.


SSL DNS Names

TLS version detection is a security process used to determine the version of the Transport Layer Security (TLS) protocol used by a computer or server.
It is important to detect the TLS version in order to ensure secure communication between two computers or servers.


TLS Version - Detect

sc-sticky-session

application/vnd.spring-boot.actuator.v3+json

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

flag	country	hostname	ip	city
	France	api.dossierfacile.logement.gouv.fr	148.253.96.193	?

https://api.dossierfacile.logement.gouv.fr/actuator/health

Système de design de l'état

Cookiesenviron 4 heures

Scripts tiersenviron 4 heures

name	domain	httpOnly	secure
sc-sticky-session	api.dossierfacile.logement.gouv.fr	✔️	✔️