content-security-policy

Content Security Policy (CSP) header not implemented

cookies

Content is visible via cross-origin resource sharing (CORS) files or headers, but is restricted to specific domains

Initial redirection is to HTTPS on same host, final destination is HTTPS

Referrer-Policy header set to "no-referrer", "same-origin", "strict-origin" or "strict-origin-when-cross-origin"

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin

X-Content-Type-Options header set to "nosniff"

X-Frame-Options (XFO) header set to SAMEORIGIN or DENY

Deprecated X-XSS-Protection header set to "1; mode=block"

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

flag	country	hostname	ip	city
	France	search.judilibre.io	51.159.85.176	Paris