update: https://annuaire-entreprises.data.gouv.fr

betagouv · Feb 18, 2024 · ca29ce2 · ca29ce2
1 parent 6afae5a
commit ca29ce2
Show file tree

Hide file tree

Showing 18 changed files with 1,784 additions and 1,812 deletions.
diff --git a/results/aHR0cHM6Ly9hbm51YWlyZS1lbnRyZXByaXNlcy5kYXRhLmdvdXYuZnI=/declaration-rgpd.json b/results/aHR0cHM6Ly9hbm51YWlyZS1lbnRyZXByaXNlcy5kYXRhLmdvdXYuZnI=/declaration-rgpd.json
@@ -1 +1 @@
-[{"slug":"ml","mention":"Mentions légales","maxScore":4,"score":2,"missingWords":["directeur (ou) directrice","publication"],"missingTrackers":[],"declarationUrl":"https://annuaire-entreprises.data.gouv.fr/mentions-legales"},{"slug":"pc","mention":null,"maxScore":0,"score":0,"missingWords":[],"missingTrackers":[]}]
+[{"slug":"ml","mention":"Mentions légales","maxScore":4,"score":2,"missingWords":["directeur (ou) directrice","publication"],"missingTrackers":[],"declarationUrl":"https://annuaire-entreprises.data.gouv.fr/mentions-legales"},{"slug":"pc","mention":"Données personnelles","maxScore":5,"score":1,"missingWords":["finalité","durée de conservation","sous-traitants (ou) sous traitants"],"missingTrackers":["googlefonts"],"declarationUrl":"https://annuaire-entreprises.data.gouv.fr/formulaire/supprimer-donnees-personnelles-entreprise"}]
diff --git a/results/aHR0cHM6Ly9hbm51YWlyZS1lbnRyZXByaXNlcy5kYXRhLmdvdXYuZnI=/ecoindex.json b/results/aHR0cHM6Ly9hbm51YWlyZS1lbnRyZXByaXNlcy5kYXRhLmdvdXYuZnI=/ecoindex.json
@@ -3,15 +3,15 @@
         "width": 1920,
         "height": 1080,
         "url": "https://annuaire-entreprises.data.gouv.fr",
-        "size": 696.879,
-        "nodes": 291,
+        "size": 700.69,
+        "nodes": 293,
         "requests": 34,
         "grade": "B",
-        "score": 77.0,
-        "ges": 1.46,
-        "water": 2.19,
+        "score": 76.0,
+        "ges": 1.48,
+        "water": 2.22,
         "ecoindex_version": "5.4.2",
-        "date": "2024-02-11 01:11:15.340490",
+        "date": "2024-02-18 01:10:11.707781",
         "page_type": "website"
     }
 ]
diff --git a/results/aHR0cHM6Ly9hbm51YWlyZS1lbnRyZXByaXNlcy5kYXRhLmdvdXYuZnI=/http.json b/results/aHR0cHM6Ly9hbm51YWlyZS1lbnRyZXByaXNlcy5kYXRhLmdvdXYuZnI=/http.json
@@ -1 +1 @@
-{"url":"https://annuaire-entreprises.data.gouv.fr","algorithm_version":3,"end_time":"Sun, 11 Feb 2024 01:13:24 GMT","grade":"B","hidden":false,"likelihood_indicator":"MEDIUM","response_headers":{"Accept-Ranges":"bytes","Age":"0","Annuaire-Entreprises-Instance-Number":"01","Cache-Control":"private, no-cache, no-store, max-age=0, must-revalidate","Connection":"keep-alive","Content-Encoding":"gzip","Content-Type":"text/html; charset=utf-8","Date":"Sun, 11 Feb 2024 01:13:23 GMT","Etag":"\"dxghbmmjmtrjv\"","Referrer-Policy":"origin-when-cross-origin","Set-Cookie":"annuaire-entreprises-session-infra-01-lvl1=website-localhost; Path=/; HttpOnly; Secure, annuaire-entreprises-user-session=Fe26.2*1*68bd8779d6dfd0a8d7257a8600dc6b707cb90c38bc18852cfb372ec4d7afa37d*E-jgdDCPKcAl4CGDM-kwrA*9yxmfKaLLJQ4N0VOSvYHi_qsEC83llboqIROjk5EJXS31T19IvBL0wcPhRVKvgur*1708218803287*72181b44f3d937065d30d9da8391d9afd73f653beccb02d0a0a559873fb37add*K_PFsJHb85dpSNogVzrsKtbPCfoQZ-R29evw7KY_Zt0~2; Max-Age=604740; Path=/; HttpOnly; Secure; SameSite=Lax","Strict-Transport-Security":"max-age=31536000","Transfer-Encoding":"chunked","Vary":"Accept-Encoding","Via":"1.1 varnish (Varnish/6.0)","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Powered-By":"Next.js","X-Varnish":"103655996","X-XSS-Protection":"1; mode=block"},"scan_id":47421053,"score":70,"start_time":"Sun, 11 Feb 2024 01:13:21 GMT","state":"FINISHED","status_code":200,"tests_failed":2,"tests_passed":9,"tests_quantity":11,"details":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","output":{"data":null,"http":false,"meta":false,"numPolicies":0,"policy":null},"pass":false,"result":"csp-not-implemented","score_description":"Content Security Policy (CSP) header not implemented","score_modifier":-25},"contribute":{"expectation":"contribute-json-only-required-on-mozilla-properties","name":"contribute","output":{"data":null},"pass":true,"result":"contribute-json-only-required-on-mozilla-properties","score_description":"Contribute.json isn't required on websites that don't belong to Mozilla","score_modifier":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","output":{"data":{"annuaire-entreprises-session-infra-01-lvl1":{"domain":"annuaire-entreprises.data.gouv.fr","expires":null,"httponly":true,"max-age":null,"path":"/","port":null,"samesite":false,"secure":true},"annuaire-entreprises-user-session":{"domain":"annuaire-entreprises.data.gouv.fr","expires":1708218743,"httponly":true,"max-age":null,"path":"/","port":null,"samesite":"Lax","secure":true}},"sameSite":false},"pass":true,"result":"cookies-secure-with-httponly-sessions","score_description":"All cookies use the Secure flag and all session cookies use the HttpOnly flag","score_modifier":0},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","output":{"data":{"acao":null,"clientaccesspolicy":null,"crossdomain":null}},"pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"Content is not visible via cross-origin resource sharing (CORS) files or headers","score_modifier":0},"redirection":{"expectation":"redirection-to-https","name":"redirection","output":{"destination":"https://annuaire-entreprises.data.gouv.fr/","redirects":true,"route":["http://annuaire-entreprises.data.gouv.fr/","https://annuaire-entreprises.data.gouv.fr/"],"status_code":200},"pass":true,"result":"redirection-to-https","score_description":"Initial redirection is to HTTPS on same host, final destination is HTTPS","score_modifier":0},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","output":{"data":"origin-when-cross-origin","http":true,"meta":false},"pass":false,"result":"referrer-policy-unsafe","score_description":"Referrer-Policy header set unsafely to \"origin\", \"origin-when-cross-origin\", or \"unsafe-url\"","score_modifier":-5},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","output":{"data":"max-age=31536000","includeSubDomains":false,"max-age":31536000,"preload":false,"preloaded":false},"pass":true,"result":"hsts-implemented-max-age-at-least-six-months","score_description":"HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)","score_modifier":0},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","output":{"data":{}},"pass":true,"result":"sri-not-implemented-but-all-scripts-loaded-from-secure-origin","score_description":"Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin","score_modifier":0},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","output":{"data":"nosniff"},"pass":true,"result":"x-content-type-options-nosniff","score_description":"X-Content-Type-Options header set to \"nosniff\"","score_modifier":0},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","output":{"data":"DENY"},"pass":true,"result":"x-frame-options-sameorigin-or-deny","score_description":"X-Frame-Options (XFO) header set to SAMEORIGIN or DENY","score_modifier":0},"x-xss-protection":{"expectation":"x-xss-protection-disabled","name":"x-xss-protection","output":{"data":"1; mode=block"},"pass":true,"result":"x-xss-protection-enabled-mode-block","score_description":"Deprecated X-XSS-Protection header set to \"1; mode=block\"","score_modifier":0}}}
+{"url":"https://annuaire-entreprises.data.gouv.fr","algorithm_version":3,"end_time":"Sun, 18 Feb 2024 01:12:04 GMT","grade":"B","hidden":false,"likelihood_indicator":"MEDIUM","response_headers":{"Accept-Ranges":"bytes","Age":"0","Annuaire-Entreprises-Instance-Number":"01","Cache-Control":"private, no-cache, no-store, max-age=0, must-revalidate","Connection":"keep-alive","Content-Encoding":"gzip","Content-Type":"text/html; charset=utf-8","Date":"Sun, 18 Feb 2024 01:12:03 GMT","Etag":"\"v56gklthn7ro7\"","Referrer-Policy":"origin-when-cross-origin","Set-Cookie":"annuaire-entreprises-session-infra-01-lvl1=website-localhost; Path=/; HttpOnly; Secure, annuaire-entreprises-user-session=Fe26.2*1*ade51572660d1372a04b9f4a142f86cd93ccae3463718f29d42a50c00eb9592e*u7MGJGD0EeI4BN3EZfxnjQ*A1Sg-Ewnzu-5nP3B_bq0y1hLDgWVE7rzw9CRTYMWfnf0hi9TXCBjm2VmKL362AJA*1708823523159*402657ee1e399e54deef4afb9fe1709d4895d839cf401301ddd2f9b37cdc051d*PbaGvRRb3dTPylHn6t0BBr4KUXo2W1BYev6ejclysjM~2; Max-Age=604740; Path=/; HttpOnly; Secure; SameSite=Lax","Strict-Transport-Security":"max-age=31536000","Transfer-Encoding":"chunked","Vary":"Accept-Encoding","Via":"1.1 varnish (Varnish/6.0)","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Powered-By":"Next.js","X-Varnish":"2603437","X-XSS-Protection":"1; mode=block"},"scan_id":47748716,"score":70,"start_time":"Sun, 18 Feb 2024 01:12:01 GMT","state":"FINISHED","status_code":200,"tests_failed":2,"tests_passed":9,"tests_quantity":11,"details":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","output":{"data":null,"http":false,"meta":false,"numPolicies":0,"policy":null},"pass":false,"result":"csp-not-implemented","score_description":"Content Security Policy (CSP) header not implemented","score_modifier":-25},"contribute":{"expectation":"contribute-json-only-required-on-mozilla-properties","name":"contribute","output":{"data":null},"pass":true,"result":"contribute-json-only-required-on-mozilla-properties","score_description":"Contribute.json isn't required on websites that don't belong to Mozilla","score_modifier":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","output":{"data":{"annuaire-entreprises-session-infra-01-lvl1":{"domain":"annuaire-entreprises.data.gouv.fr","expires":null,"httponly":true,"max-age":null,"path":"/","port":null,"samesite":false,"secure":true},"annuaire-entreprises-user-session":{"domain":"annuaire-entreprises.data.gouv.fr","expires":1708823463,"httponly":true,"max-age":null,"path":"/","port":null,"samesite":"Lax","secure":true}},"sameSite":false},"pass":true,"result":"cookies-secure-with-httponly-sessions","score_description":"All cookies use the Secure flag and all session cookies use the HttpOnly flag","score_modifier":0},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","output":{"data":{"acao":null,"clientaccesspolicy":null,"crossdomain":null}},"pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"Content is not visible via cross-origin resource sharing (CORS) files or headers","score_modifier":0},"redirection":{"expectation":"redirection-to-https","name":"redirection","output":{"destination":"https://annuaire-entreprises.data.gouv.fr/","redirects":true,"route":["http://annuaire-entreprises.data.gouv.fr/","https://annuaire-entreprises.data.gouv.fr/"],"status_code":200},"pass":true,"result":"redirection-to-https","score_description":"Initial redirection is to HTTPS on same host, final destination is HTTPS","score_modifier":0},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","output":{"data":"origin-when-cross-origin","http":true,"meta":false},"pass":false,"result":"referrer-policy-unsafe","score_description":"Referrer-Policy header set unsafely to \"origin\", \"origin-when-cross-origin\", or \"unsafe-url\"","score_modifier":-5},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","output":{"data":"max-age=31536000","includeSubDomains":false,"max-age":31536000,"preload":false,"preloaded":false},"pass":true,"result":"hsts-implemented-max-age-at-least-six-months","score_description":"HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)","score_modifier":0},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","output":{"data":{}},"pass":true,"result":"sri-not-implemented-but-all-scripts-loaded-from-secure-origin","score_description":"Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin","score_modifier":0},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","output":{"data":"nosniff"},"pass":true,"result":"x-content-type-options-nosniff","score_description":"X-Content-Type-Options header set to \"nosniff\"","score_modifier":0},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","output":{"data":"DENY"},"pass":true,"result":"x-frame-options-sameorigin-or-deny","score_description":"X-Frame-Options (XFO) header set to SAMEORIGIN or DENY","score_modifier":0},"x-xss-protection":{"expectation":"x-xss-protection-disabled","name":"x-xss-protection","output":{"data":"1; mode=block"},"pass":true,"result":"x-xss-protection-enabled-mode-block","score_description":"Deprecated X-XSS-Protection header set to \"1; mode=block\"","score_modifier":0}}}
diff --git a/...XNlcy5kYXRhLmdvdXYuZnI=/lhr-aHR0cHM6Ly9hbm51YWlyZS1lbnRyZXByaXNlcy5kYXRhLmdvdXYuZnIv.html b/...XNlcy5kYXRhLmdvdXYuZnI=/lhr-aHR0cHM6Ly9hbm51YWlyZS1lbnRyZXByaXNlcy5kYXRhLmdvdXYuZnIv.html
diff --git a/results/aHR0cHM6Ly9hbm51YWlyZS1lbnRyZXByaXNlcy5kYXRhLmdvdXYuZnI=/lhr.json b/results/aHR0cHM6Ly9hbm51YWlyZS1lbnRyZXByaXNlcy5kYXRhLmdvdXYuZnI=/lhr.json
diff --git a/results/aHR0cHM6Ly9hbm51YWlyZS1lbnRyZXByaXNlcy5kYXRhLmdvdXYuZnI=/nmapvuln.gnmap b/results/aHR0cHM6Ly9hbm51YWlyZS1lbnRyZXByaXNlcy5kYXRhLmdvdXYuZnI=/nmapvuln.gnmap
@@ -1,4 +1,4 @@
-# Nmap 7.92 scan initiated Sun Feb 11 01:15:19 2024 as: nmap -sV --script vulners --script-args mincvss=5.0 -oA /data/nmapvuln annuaire-entreprises.data.gouv.fr
+# Nmap 7.92 scan initiated Sun Feb 18 01:14:08 2024 as: nmap -sV --script vulners --script-args mincvss=5.0 -oA /data/nmapvuln annuaire-entreprises.data.gouv.fr
 Host: 185.231.164.12 ()	Status: Up
 Host: 185.231.164.12 ()	Ports: 80/open/tcp//http///, 443/open/tcp//ssl|http//nginx 1.25.3/	Ignored State: filtered (998)
-# Nmap done at Sun Feb 11 01:15:46 2024 -- 1 IP address (1 host up) scanned in 27.12 seconds
+# Nmap done at Sun Feb 18 01:14:32 2024 -- 1 IP address (1 host up) scanned in 24.37 seconds
diff --git a/results/aHR0cHM6Ly9hbm51YWlyZS1lbnRyZXByaXNlcy5kYXRhLmdvdXYuZnI=/nmapvuln.html b/results/aHR0cHM6Ly9hbm51YWlyZS1lbnRyZXByaXNlcy5kYXRhLmdvdXYuZnI=/nmapvuln.html
@@ -54,7 +54,7 @@
 <h1>Scan Report<br><small>Nmap 7.92</small>
 </h1>
 <pre style="white-space:pre-wrap; word-wrap:break-word;">nmap -sV --script vulners --script-args mincvss=5.0 -oA /data/nmapvuln annuaire-entreprises.data.gouv.fr</pre>
-<p class="lead">Sun Feb 11 01:15:19 2024 – Sun Feb 11 01:15:46 2024<br>1 hosts scanned.
+<p class="lead">Sun Feb 18 01:14:08 2024 – Sun Feb 18 01:14:32 2024<br>1 hosts scanned.
               1 hosts up.
               0 hosts down.
             </p>
@@ -121,7 +121,7 @@ <h4>Ports</h4>
 <pre style="white-space:pre-wrap; word-wrap:break-word;">
   FourOhFourRequest: 
     HTTP/1.1 301 Moved Permanently
-    Date: Sun, 11 Feb 2024 01:15:34 GMT
+    Date: Sun, 18 Feb 2024 01:14:22 GMT
     Content-Type: text/html
     Content-Length: 166
     Connection: close
@@ -135,7 +135,7 @@ <h4>Ports</h4>
     &lt;/html&gt;
   GetRequest, HTTPOptions: 
     HTTP/1.1 301 Moved Permanently
-    Date: Sun, 11 Feb 2024 01:15:33 GMT
+    Date: Sun, 18 Feb 2024 01:14:22 GMT
     Content-Type: text/html
     Content-Length: 166
     Connection: close
@@ -149,7 +149,7 @@ <h4>Ports</h4>
     &lt;/html&gt;
   RPCCheck: 
     HTTP/1.1 400 Bad Request
-    Date: Sun, 11 Feb 2024 01:15:39 GMT
+    Date: Sun, 18 Feb 2024 01:14:27 GMT
     Content-Type: text/html
     Content-Length: 154
     Connection: close
@@ -170,7 +170,7 @@ <h4>Ports</h4>
     &lt;/html&gt;
   X11Probe: 
     HTTP/1.1 400 Bad Request
-    Date: Sun, 11 Feb 2024 01:15:34 GMT
+    Date: Sun, 18 Feb 2024 01:14:22 GMT
     Content-Type: text/html
     Content-Length: 154
     Connection: close
@@ -191,7 +191,13 @@ <h4>Ports</h4>
 <td title="Version">1.25.3</td>
 <td title="Extra Info"></td>
 </tr>
-<tr><td colspan="7"><a href="https://nvd.nist.gov/vuln/search/results?form_type=Advanced&amp;cves=on&amp;cpe_version=cpe:/a:igor_sysoev:nginx:1.25.3">cpe:/a:igor_sysoev:nginx:1.25.3</a></td></tr>
+<tr><td colspan="7">
+<a href="https://nvd.nist.gov/vuln/search/results?form_type=Advanced&amp;cves=on&amp;cpe_version=cpe:/a:igor_sysoev:nginx:1.25.3">cpe:/a:igor_sysoev:nginx:1.25.3</a><h5>vulners</h5>
+<pre style="white-space:pre-wrap; word-wrap:break-word;">
+  cpe:/a:igor_sysoev:nginx:1.25.3: 
+    	NGINX:CVE-2024-24990	5.0	https://vulners.com/nginx/NGINX:CVE-2024-24990
+    	NGINX:CVE-2024-24989	5.0	https://vulners.com/nginx/NGINX:CVE-2024-24989</pre>
+</td></tr>
 </tbody>
 </table></div>
 </div>

diff --git a/results/aHR0cHM6Ly9hbm51YWlyZS1lbnRyZXByaXNlcy5kYXRhLmdvdXYuZnI=/nmapvuln.json b/results/aHR0cHM6Ly9hbm51YWlyZS1lbnRyZXByaXNlcy5kYXRhLmdvdXYuZnI=/nmapvuln.json
@@ -1 +1 @@
-{"host":"annuaire-entreprises.data.gouv.fr","protocol":"tcp","closed_ports":"998","open_ports":[{"service":{"name":"http","id":"80","vulnerabilities":[]}},{"service":{"name":"http","product":"nginx","id":"443","version":"1.25.3","vulnerabilities":[]}}],"grade":"A"}
+{"host":"annuaire-entreprises.data.gouv.fr","protocol":"tcp","closed_ports":"998","open_ports":[{"service":{"name":"http","id":"80","vulnerabilities":[]}},{"service":{"name":"http","product":"nginx","id":"443","version":"1.25.3","vulnerabilities":[{"id":"NGINX:CVE-2024-24990","cvss":"5.0","type":"nginx","is_exploit":"false"},{"id":"NGINX:CVE-2024-24989","cvss":"5.0","type":"nginx","is_exploit":"false"}]}}],"grade":"C"}
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		[{"slug":"ml","mention":"Mentions légales","maxScore":4,"score":2,"missingWords":["directeur (ou) directrice","publication"],"missingTrackers":[],"declarationUrl":"https://annuaire-entreprises.data.gouv.fr/mentions-legales"},{"slug":"pc","mention":null,"maxScore":0,"score":0,"missingWords":[],"missingTrackers":[]}]
		[{"slug":"ml","mention":"Mentions légales","maxScore":4,"score":2,"missingWords":["directeur (ou) directrice","publication"],"missingTrackers":[],"declarationUrl":"https://annuaire-entreprises.data.gouv.fr/mentions-legales"},{"slug":"pc","mention":"Données personnelles","maxScore":5,"score":1,"missingWords":["finalité","durée de conservation","sous-traitants (ou) sous traitants"],"missingTrackers":["googlefonts"],"declarationUrl":"https://annuaire-entreprises.data.gouv.fr/formulaire/supprimer-donnees-personnelles-entreprise"}]
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		{"url":"https://annuaire-entreprises.data.gouv.fr","algorithm_version":3,"end_time":"Sun, 11 Feb 2024 01:13:24 GMT","grade":"B","hidden":false,"likelihood_indicator":"MEDIUM","response_headers":{"Accept-Ranges":"bytes","Age":"0","Annuaire-Entreprises-Instance-Number":"01","Cache-Control":"private, no-cache, no-store, max-age=0, must-revalidate","Connection":"keep-alive","Content-Encoding":"gzip","Content-Type":"text/html; charset=utf-8","Date":"Sun, 11 Feb 2024 01:13:23 GMT","Etag":"\"dxghbmmjmtrjv\"","Referrer-Policy":"origin-when-cross-origin","Set-Cookie":"annuaire-entreprises-session-infra-01-lvl1=website-localhost; Path=/; HttpOnly; Secure, annuaire-entreprises-user-session=Fe26.2168bd8779d6dfd0a8d7257a8600dc6b707cb90c38bc18852cfb372ec4d7afa37dE-jgdDCPKcAl4CGDM-kwrA9yxmfKaLLJQ4N0VOSvYHi_qsEC83llboqIROjk5EJXS31T19IvBL0wcPhRVKvgur170821880328772181b44f3d937065d30d9da8391d9afd73f653beccb02d0a0a559873fb37add*K_PFsJHb85dpSNogVzrsKtbPCfoQZ-R29evw7KY_Zt0~2; Max-Age=604740; Path=/; HttpOnly; Secure; SameSite=Lax","Strict-Transport-Security":"max-age=31536000","Transfer-Encoding":"chunked","Vary":"Accept-Encoding","Via":"1.1 varnish (Varnish/6.0)","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Powered-By":"Next.js","X-Varnish":"103655996","X-XSS-Protection":"1; mode=block"},"scan_id":47421053,"score":70,"start_time":"Sun, 11 Feb 2024 01:13:21 GMT","state":"FINISHED","status_code":200,"tests_failed":2,"tests_passed":9,"tests_quantity":11,"details":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","output":{"data":null,"http":false,"meta":false,"numPolicies":0,"policy":null},"pass":false,"result":"csp-not-implemented","score_description":"Content Security Policy (CSP) header not implemented","score_modifier":-25},"contribute":{"expectation":"contribute-json-only-required-on-mozilla-properties","name":"contribute","output":{"data":null},"pass":true,"result":"contribute-json-only-required-on-mozilla-properties","score_description":"Contribute.json isn't required on websites that don't belong to Mozilla","score_modifier":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","output":{"data":{"annuaire-entreprises-session-infra-01-lvl1":{"domain":"annuaire-entreprises.data.gouv.fr","expires":null,"httponly":true,"max-age":null,"path":"/","port":null,"samesite":false,"secure":true},"annuaire-entreprises-user-session":{"domain":"annuaire-entreprises.data.gouv.fr","expires":1708218743,"httponly":true,"max-age":null,"path":"/","port":null,"samesite":"Lax","secure":true}},"sameSite":false},"pass":true,"result":"cookies-secure-with-httponly-sessions","score_description":"All cookies use the Secure flag and all session cookies use the HttpOnly flag","score_modifier":0},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","output":{"data":{"acao":null,"clientaccesspolicy":null,"crossdomain":null}},"pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"Content is not visible via cross-origin resource sharing (CORS) files or headers","score_modifier":0},"redirection":{"expectation":"redirection-to-https","name":"redirection","output":{"destination":"https://annuaire-entreprises.data.gouv.fr/","redirects":true,"route":["http://annuaire-entreprises.data.gouv.fr/","https://annuaire-entreprises.data.gouv.fr/"],"status_code":200},"pass":true,"result":"redirection-to-https","score_description":"Initial redirection is to HTTPS on same host, final destination is HTTPS","score_modifier":0},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","output":{"data":"origin-when-cross-origin","http":true,"meta":false},"pass":false,"result":"referrer-policy-unsafe","score_description":"Referrer-Policy header set unsafely to \"origin\", \"origin-when-cross-origin\", or \"unsafe-url\"","score_modifier":-5},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","output":{"data":"max-age=31536000","includeSubDomains":false,"max-age":31536000,"preload":false,"preloaded":false},"pass":true,"result":"hsts-implemented-max-age-at-least-six-months","score_description":"HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)","score_modifier":0},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","output":{"data":{}},"pass":true,"result":"sri-not-implemented-but-all-scripts-loaded-from-secure-origin","score_description":"Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin","score_modifier":0},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","output":{"data":"nosniff"},"pass":true,"result":"x-content-type-options-nosniff","score_description":"X-Content-Type-Options header set to \"nosniff\"","score_modifier":0},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","output":{"data":"DENY"},"pass":true,"result":"x-frame-options-sameorigin-or-deny","score_description":"X-Frame-Options (XFO) header set to SAMEORIGIN or DENY","score_modifier":0},"x-xss-protection":{"expectation":"x-xss-protection-disabled","name":"x-xss-protection","output":{"data":"1; mode=block"},"pass":true,"result":"x-xss-protection-enabled-mode-block","score_description":"Deprecated X-XSS-Protection header set to \"1; mode=block\"","score_modifier":0}}}
		{"url":"https://annuaire-entreprises.data.gouv.fr","algorithm_version":3,"end_time":"Sun, 18 Feb 2024 01:12:04 GMT","grade":"B","hidden":false,"likelihood_indicator":"MEDIUM","response_headers":{"Accept-Ranges":"bytes","Age":"0","Annuaire-Entreprises-Instance-Number":"01","Cache-Control":"private, no-cache, no-store, max-age=0, must-revalidate","Connection":"keep-alive","Content-Encoding":"gzip","Content-Type":"text/html; charset=utf-8","Date":"Sun, 18 Feb 2024 01:12:03 GMT","Etag":"\"v56gklthn7ro7\"","Referrer-Policy":"origin-when-cross-origin","Set-Cookie":"annuaire-entreprises-session-infra-01-lvl1=website-localhost; Path=/; HttpOnly; Secure, annuaire-entreprises-user-session=Fe26.21ade51572660d1372a04b9f4a142f86cd93ccae3463718f29d42a50c00eb9592eu7MGJGD0EeI4BN3EZfxnjQA1Sg-Ewnzu-5nP3B_bq0y1hLDgWVE7rzw9CRTYMWfnf0hi9TXCBjm2VmKL362AJA1708823523159402657ee1e399e54deef4afb9fe1709d4895d839cf401301ddd2f9b37cdc051d*PbaGvRRb3dTPylHn6t0BBr4KUXo2W1BYev6ejclysjM~2; Max-Age=604740; Path=/; HttpOnly; Secure; SameSite=Lax","Strict-Transport-Security":"max-age=31536000","Transfer-Encoding":"chunked","Vary":"Accept-Encoding","Via":"1.1 varnish (Varnish/6.0)","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Powered-By":"Next.js","X-Varnish":"2603437","X-XSS-Protection":"1; mode=block"},"scan_id":47748716,"score":70,"start_time":"Sun, 18 Feb 2024 01:12:01 GMT","state":"FINISHED","status_code":200,"tests_failed":2,"tests_passed":9,"tests_quantity":11,"details":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","output":{"data":null,"http":false,"meta":false,"numPolicies":0,"policy":null},"pass":false,"result":"csp-not-implemented","score_description":"Content Security Policy (CSP) header not implemented","score_modifier":-25},"contribute":{"expectation":"contribute-json-only-required-on-mozilla-properties","name":"contribute","output":{"data":null},"pass":true,"result":"contribute-json-only-required-on-mozilla-properties","score_description":"Contribute.json isn't required on websites that don't belong to Mozilla","score_modifier":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","output":{"data":{"annuaire-entreprises-session-infra-01-lvl1":{"domain":"annuaire-entreprises.data.gouv.fr","expires":null,"httponly":true,"max-age":null,"path":"/","port":null,"samesite":false,"secure":true},"annuaire-entreprises-user-session":{"domain":"annuaire-entreprises.data.gouv.fr","expires":1708823463,"httponly":true,"max-age":null,"path":"/","port":null,"samesite":"Lax","secure":true}},"sameSite":false},"pass":true,"result":"cookies-secure-with-httponly-sessions","score_description":"All cookies use the Secure flag and all session cookies use the HttpOnly flag","score_modifier":0},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","output":{"data":{"acao":null,"clientaccesspolicy":null,"crossdomain":null}},"pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"Content is not visible via cross-origin resource sharing (CORS) files or headers","score_modifier":0},"redirection":{"expectation":"redirection-to-https","name":"redirection","output":{"destination":"https://annuaire-entreprises.data.gouv.fr/","redirects":true,"route":["http://annuaire-entreprises.data.gouv.fr/","https://annuaire-entreprises.data.gouv.fr/"],"status_code":200},"pass":true,"result":"redirection-to-https","score_description":"Initial redirection is to HTTPS on same host, final destination is HTTPS","score_modifier":0},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","output":{"data":"origin-when-cross-origin","http":true,"meta":false},"pass":false,"result":"referrer-policy-unsafe","score_description":"Referrer-Policy header set unsafely to \"origin\", \"origin-when-cross-origin\", or \"unsafe-url\"","score_modifier":-5},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","output":{"data":"max-age=31536000","includeSubDomains":false,"max-age":31536000,"preload":false,"preloaded":false},"pass":true,"result":"hsts-implemented-max-age-at-least-six-months","score_description":"HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)","score_modifier":0},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","output":{"data":{}},"pass":true,"result":"sri-not-implemented-but-all-scripts-loaded-from-secure-origin","score_description":"Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin","score_modifier":0},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","output":{"data":"nosniff"},"pass":true,"result":"x-content-type-options-nosniff","score_description":"X-Content-Type-Options header set to \"nosniff\"","score_modifier":0},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","output":{"data":"DENY"},"pass":true,"result":"x-frame-options-sameorigin-or-deny","score_description":"X-Frame-Options (XFO) header set to SAMEORIGIN or DENY","score_modifier":0},"x-xss-protection":{"expectation":"x-xss-protection-disabled","name":"x-xss-protection","output":{"data":"1; mode=block"},"pass":true,"result":"x-xss-protection-enabled-mode-block","score_description":"Deprecated X-XSS-Protection header set to \"1; mode=block\"","score_modifier":0}}}
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		{"host":"annuaire-entreprises.data.gouv.fr","protocol":"tcp","closed_ports":"998","open_ports":[{"service":{"name":"http","id":"80","vulnerabilities":[]}},{"service":{"name":"http","product":"nginx","id":"443","version":"1.25.3","vulnerabilities":[]}}],"grade":"A"}
		{"host":"annuaire-entreprises.data.gouv.fr","protocol":"tcp","closed_ports":"998","open_ports":[{"service":{"name":"http","id":"80","vulnerabilities":[]}},{"service":{"name":"http","product":"nginx","id":"443","version":"1.25.3","vulnerabilities":[{"id":"NGINX:CVE-2024-24990","cvss":"5.0","type":"nginx","is_exploit":"false"},{"id":"NGINX:CVE-2024-24989","cvss":"5.0","type":"nginx","is_exploit":"false"}]}}],"grade":"C"}