github.com/mozilla/http-observatory issues | Ecosyste.ms: OpenCollective

Warn if "Server" header reveals software version

JeremyRand opened this issue over 3 years ago

User-Agent changed?

craigfrancis opened this issue almost 4 years ago

TLS Observatory broken

nod0n opened this issue about 4 years ago

Travis CI free usage ends Dec 3; mozilla repos should switch to other CI platforms

hwine opened this issue about 4 years ago

Protocol-Relative Urls Considered Insecure

ray-novak opened this issue about 4 years ago

Fix error with tests

april opened this pull request about 4 years ago

Support SameSite=None Correctly

thecontrarycat opened this pull request about 4 years ago

Update hsts list

april opened this pull request about 4 years ago

Fix installation error

whoot opened this pull request over 4 years ago

Installation issue due dependency error

whoot opened this issue over 4 years ago

SameSite='None' flagged as invalid

thecontrarycat opened this issue over 4 years ago

Don't penalize disabled X-XSS-PROTECTION

franziskuskiefer opened this issue over 4 years ago

Automatic update of the *.json files.

dalf opened this issue over 4 years ago

Fix bug with the local scanner score

dalf opened this pull request over 4 years ago

Firefox Addon: Show Grade of Website

NoNamePro0 opened this issue over 4 years ago

Different scoring between observatory.mozilla.org and the git repository

dalf opened this issue over 4 years ago

SRI

malekalmorte75 opened this issue over 4 years ago

2 identical sites - http-https redirect detected on only one.

MarkHeddaeus opened this issue over 4 years ago

large number of scans stuck at pending/arborted

Klotzkopf opened this issue over 4 years ago

HTTP Observatory "Scan In Progress" never finishes.

fgamgee opened this issue over 4 years ago

Error: "CSP implemented unsafely"

sebelk opened this issue over 4 years ago

Replace HPKP scoring with deprecation warning if present

floatingatoll opened this issue over 4 years ago

HPKP is downgraded, update scoring to report presence/absence/preload

floatingatoll opened this pull request over 4 years ago

Why the grade result is not the same as SslLabs?

parhamPudding opened this issue almost 5 years ago

Favicon missing - 404

the-smooth-operator opened this issue almost 5 years ago

Bump psutil from 5.4.8 to 5.6.6 in /httpobs/scanner

dependabot[bot] opened this pull request almost 5 years ago

Update __init__.py

joshAg opened this pull request almost 5 years ago

No way to grade pages that are not the homepage via API

afmars opened this issue almost 5 years ago

Update HSTS, remove Jinja

april opened this pull request almost 5 years ago

Publish `httpobs` to PyPI for easy installation and to be used as a package

faheel opened this issue about 5 years ago

User-Agent to specify http-observatory

craigfrancis opened this issue about 5 years ago

Bump werkzeug from 0.14.1 to 0.15.3 in /httpobs

dependabot[bot] opened this pull request about 5 years ago

Stuck on "Loading results"

scrouet opened this issue over 5 years ago

Allow TLS 1.3-only sites to connect to the API.

ghost opened this issue over 5 years ago

use Jinja2==2.10.1 to avoid CVE-2019-10906

mattf opened this pull request over 5 years ago

Invalid "frame-ancestors: 'none'" in meta tag counts as X-Frame-Options

printfn opened this issue over 5 years ago

Move Content Security Policy section to top

tehCh0nG opened this pull request over 5 years ago

Running docker-compose up should work without error

chris-aeviator opened this issue almost 6 years ago

Treat insecure __cfduid cookies as insecure

keks opened this pull request almost 6 years ago

Improve local installation documentation

jozefizso opened this pull request about 6 years ago

correctly flag "Set-Cookie: SameSite;" as flag-invalid

floatingatoll opened this pull request about 6 years ago

Scanning for `X-Content-Type-Options` is incomplete

mattbrundage opened this issue over 6 years ago

Don't penalize Heroku apps using session affinity

mathjazz opened this issue over 7 years ago

Add support for `Expect-CT` header

craigfrancis opened this issue almost 8 years ago

Add penalty for using deprecated X-* CSP headers

edmorley opened this issue almost 8 years ago

Remove __cfduid exemption

april opened this issue about 8 years ago

Reference on my notes on how to install http observatory on Debian Jessie

briner opened this pull request over 8 years ago

Cookies: `__Secure-`/`__Host-` prefixes

craigfrancis opened this issue over 8 years ago