53 lines
1.9 KiB
YAML
53 lines
1.9 KiB
YAML
id: azure-appservice-http2-not-enabled
|
|
info:
|
|
name: Azure App Service HTTP/2 Not Enabled
|
|
author: princechaddha
|
|
severity: low
|
|
description: |
|
|
Ensure that your Microsoft Azure App Service web applications are using the latest version of the HTTP protocol (i.e. HTTP/2) in order to make your web applications load faster. HTTP 2.0 represents a major upgrade of the HTTP/1.1 protocol, with the primary goals of reducing the impact of latency and connection load on web servers through full request and response multiplexing, minimizing protocol overhead via HTTP header field compression, and supporting HTTP request prioritization and server push.
|
|
impact: |
|
|
Not using HTTP/2 can result in slower web applications due to increased latency and connection load.
|
|
remediation: |
|
|
Enable HTTP/2 on your Azure App Service web applications to improve their performance and adhere to modern web standards.
|
|
reference:
|
|
- https://docs.microsoft.com/en-us/azure/app-service/configure-language-http2
|
|
tags: cloud,devops,azure,microsoft,appservice,azure-cloud-config
|
|
|
|
flow: |
|
|
code(1);
|
|
for (let WebAppId of iterate(template.webAppIds)) {
|
|
set("id", WebAppId);
|
|
code(2);
|
|
}
|
|
|
|
self-contained: true
|
|
code:
|
|
- engine:
|
|
- sh
|
|
- bash
|
|
source: |
|
|
az webapp list --query '[*].id' --output json
|
|
|
|
extractors:
|
|
- type: json
|
|
name: webAppIds
|
|
internal: true
|
|
json:
|
|
- '.[]'
|
|
|
|
- engine:
|
|
- sh
|
|
- bash
|
|
source: |
|
|
az webapp config show --ids $id --query 'http20Enabled' --output json
|
|
|
|
matchers:
|
|
- type: word
|
|
words:
|
|
- "false"
|
|
|
|
extractors:
|
|
- type: dsl
|
|
dsl:
|
|
- 'id + " does not have HTTP/2 enabled"'
|
|
# digest: 490a0046304402206c4c4fbbcb9d908f37b19470635dc551403a0d2edc1fd3bc6ebdf176d25f1bda02203f34f18e25317793c1444b78a53906bfec33da137c9deda61cf2902a68ca0789:922c64590222798bb761d5b6d8e72950 |