All issues

Search results

Are the IP adresses listed at .well-known/ipv4.txt correct?

Status: Open.

#112In securityheaders/securityheaders-bugs;

· emilbjorklund opened on May 8, 2024

API response is missing correct content

Status: Open.

#111In securityheaders/securityheaders-bugs;

· sverrets opened on Sep 13, 2023

New API Authorization requirement and options for Open Source projects

Status: Open.

#110In securityheaders/securityheaders-bugs;

· calebcartwright opened on May 8, 2023

Don't require Permissions-Policy if it's redundant

Status: Open.

#103In securityheaders/securityheaders-bugs;

· Seirdy opened on Nov 5, 2021

CSP show missing even though it is configured.

Status: Open.

#102In securityheaders/securityheaders-bugs;

· mmartire-prosper opened on Sep 17, 2021

Security Headers not showing

Status: Open.

#101In securityheaders/securityheaders-bugs;

· ghost opened on Aug 25, 2021

'unsafe-inline' in style-src directive capping score to A when it should probably not

Status: Open.

#100In securityheaders/securityheaders-bugs;

· joelbourbon opened on Aug 12, 2021

Expect-CT is obsolete

Status: Open.

#99In securityheaders/securityheaders-bugs;

· hannob opened on Jun 1, 2021

Permissions-Policy check wrongly accepts single quote as origin enclosing character

Status: Open.

#98In securityheaders/securityheaders-bugs;

· Peneheals opened on May 6, 2021

Permissions-Policy check wrongly accepts ";" character as a good separator

Status: Open.

#97In securityheaders/securityheaders-bugs;

· Peneheals opened on May 6, 2021

How bad is it to not include security headers when redirecting from Http to Https?

Status: Open.

#95In securityheaders/securityheaders-bugs;

· nulltoken opened on May 3, 2021

securityheaders follows redirect that doesn't exist

Status: Open.

#94In securityheaders/securityheaders-bugs;

· weinzierl opened on Feb 27, 2021