Merge pull request #7266 from jub0bs/fix-issue-7265-drop-cors-checks-from-missing-security-headers-tmpl

Fix issue 7265

http/misconfiguration/http-missing-security-headers.yaml

@@ -2,7 +2,7 @@ id: http-missing-security-headers
 
 info:
   name: HTTP Missing Security Headers
-  author: socketz,geeknik,G4L1T0,convisoappsec,kurohost,dawid-czarnecki,forgedhallpass
+  author: socketz,geeknik,G4L1T0,convisoappsec,kurohost,dawid-czarnecki,forgedhallpass,jub0bs
   severity: info
   description: |
     This template searches for missing HTTP security headers. The impact of these missing headers can vary.
@@ -95,45 +95,3 @@ http:
           - "!regex('(?i)cross-origin-resource-policy', all_headers)"
           - "status_code != 301 && status_code != 302"
         condition: and
-
-      - type: dsl
-        name: access-control-allow-origin
-        dsl:
-          - "!regex('(?i)access-control-allow-origin', all_headers)"
-          - "status_code != 301 && status_code != 302"
-        condition: and
-
-      - type: dsl
-        name: access-control-allow-credentials
-        dsl:
-          - "!regex('(?i)access-control-allow-credentials', all_headers)"
-          - "status_code != 301 && status_code != 302"
-        condition: and
-
-      - type: dsl
-        name: access-control-expose-headers
-        dsl:
-          - "!regex('(?i)access-control-expose-headers', all_headers)"
-          - "status_code != 301 && status_code != 302"
-        condition: and
-
-      - type: dsl
-        name: access-control-max-age
-        dsl:
-          - "!regex('(?i)access-control-max-age', all_headers)"
-          - "status_code != 301 && status_code != 302"
-        condition: and
-
-      - type: dsl
-        name: access-control-allow-methods
-        dsl:
-          - "!regex('(?i)access-control-allow-methods', all_headers)"
-          - "status_code != 301 && status_code != 302"
-        condition: and
-
-      - type: dsl
-        name: access-control-allow-headers
-        dsl:
-          - "!regex('(?i)access-control-allow-headers', all_headers)"
-          - "status_code != 301 && status_code != 302"
-        condition: and