Fix issue 7265

patch-1
jub0bs 2023-05-20 14:02:26 +02:00
parent 36c26fc99b
commit d53658c882
No known key found for this signature in database
GPG Key ID: 9BC102DCCA7031A9
1 changed files with 1 additions and 43 deletions

View File

@ -2,7 +2,7 @@ id: http-missing-security-headers
info:
name: HTTP Missing Security Headers
author: socketz,geeknik,G4L1T0,convisoappsec,kurohost,dawid-czarnecki,forgedhallpass
author: socketz,geeknik,G4L1T0,convisoappsec,kurohost,dawid-czarnecki,forgedhallpass,jub0bs
severity: info
description: |
This template searches for missing HTTP security headers. The impact of these missing headers can vary.
@ -95,45 +95,3 @@ http:
- "!regex('(?i)cross-origin-resource-policy', all_headers)"
- "status_code != 301 && status_code != 302"
condition: and
- type: dsl
name: access-control-allow-origin
dsl:
- "!regex('(?i)access-control-allow-origin', all_headers)"
- "status_code != 301 && status_code != 302"
condition: and
- type: dsl
name: access-control-allow-credentials
dsl:
- "!regex('(?i)access-control-allow-credentials', all_headers)"
- "status_code != 301 && status_code != 302"
condition: and
- type: dsl
name: access-control-expose-headers
dsl:
- "!regex('(?i)access-control-expose-headers', all_headers)"
- "status_code != 301 && status_code != 302"
condition: and
- type: dsl
name: access-control-max-age
dsl:
- "!regex('(?i)access-control-max-age', all_headers)"
- "status_code != 301 && status_code != 302"
condition: and
- type: dsl
name: access-control-allow-methods
dsl:
- "!regex('(?i)access-control-allow-methods', all_headers)"
- "status_code != 301 && status_code != 302"
condition: and
- type: dsl
name: access-control-allow-headers
dsl:
- "!regex('(?i)access-control-allow-headers', all_headers)"
- "status_code != 301 && status_code != 302"
condition: and