PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-08 05:31:31 +00:00
Code Issues Projects Releases Wiki Activity

Changes in Expect-CT header

Browse Source
This commit is contained in:
vinamra
2017-06-07 00:59:33 +00:00
parent 7de3e37c2d
commit 9f8b8863c5
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
scripts/http-security-headers.nse
View File

@@ -11,7 +11,7 @@ shows whether they are configured and gives a brief description of the header an
The script requests the server for the header with http.head and parses it to list headers founds with their
configurations. The script checks for HSTS(HTTP Strict Transport Security), HPKP(HTTP Public Key Pins),
X-Frame-Options, X-XSS-Protection, X-Content-Type-Options, Content-Security-Policy,
X-Permitted-Cross-Domain-Policies, Set-Cookie, Except-CT, Cache-Control, Pragma and Expires.
X-Permitted-Cross-Domain-Policies, Set-Cookie, Expect-CT, Cache-Control, Pragma and Expires.
References: https://www.owasp.org/index.php/OWASP_Secure_Headers_Project
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers
@@ -314,10 +314,10 @@ action = function(host, port)
end
end
if response.header['except-ct'] then
output_info.Except_Ct = {}
table.insert(output_info.Except_Ct, "Except-CT is configured.")
table.insert(output_info.Except_Ct, "Header: Except-CT: " .. response.header['except-ct'])
if response.header['expect-ct'] then
output_info.Expect_Ct = {}
table.insert(output_info.Expect_Ct, "Expect-CT is configured.")
table.insert(output_info.Expect_Ct, "Header: Expect-CT: " .. response.header['expect-ct'])
end
if response.header['cache-control'] then