Fix issue 7265
parent
36c26fc99b
commit
d53658c882
|
@ -2,7 +2,7 @@ id: http-missing-security-headers
|
|||
|
||||
info:
|
||||
name: HTTP Missing Security Headers
|
||||
author: socketz,geeknik,G4L1T0,convisoappsec,kurohost,dawid-czarnecki,forgedhallpass
|
||||
author: socketz,geeknik,G4L1T0,convisoappsec,kurohost,dawid-czarnecki,forgedhallpass,jub0bs
|
||||
severity: info
|
||||
description: |
|
||||
This template searches for missing HTTP security headers. The impact of these missing headers can vary.
|
||||
|
@ -95,45 +95,3 @@ http:
|
|||
- "!regex('(?i)cross-origin-resource-policy', all_headers)"
|
||||
- "status_code != 301 && status_code != 302"
|
||||
condition: and
|
||||
|
||||
- type: dsl
|
||||
name: access-control-allow-origin
|
||||
dsl:
|
||||
- "!regex('(?i)access-control-allow-origin', all_headers)"
|
||||
- "status_code != 301 && status_code != 302"
|
||||
condition: and
|
||||
|
||||
- type: dsl
|
||||
name: access-control-allow-credentials
|
||||
dsl:
|
||||
- "!regex('(?i)access-control-allow-credentials', all_headers)"
|
||||
- "status_code != 301 && status_code != 302"
|
||||
condition: and
|
||||
|
||||
- type: dsl
|
||||
name: access-control-expose-headers
|
||||
dsl:
|
||||
- "!regex('(?i)access-control-expose-headers', all_headers)"
|
||||
- "status_code != 301 && status_code != 302"
|
||||
condition: and
|
||||
|
||||
- type: dsl
|
||||
name: access-control-max-age
|
||||
dsl:
|
||||
- "!regex('(?i)access-control-max-age', all_headers)"
|
||||
- "status_code != 301 && status_code != 302"
|
||||
condition: and
|
||||
|
||||
- type: dsl
|
||||
name: access-control-allow-methods
|
||||
dsl:
|
||||
- "!regex('(?i)access-control-allow-methods', all_headers)"
|
||||
- "status_code != 301 && status_code != 302"
|
||||
condition: and
|
||||
|
||||
- type: dsl
|
||||
name: access-control-allow-headers
|
||||
dsl:
|
||||
- "!regex('(?i)access-control-allow-headers', all_headers)"
|
||||
- "status_code != 301 && status_code != 302"
|
||||
condition: and
|
||||
|
|
Loading…
Reference in New Issue