v0.59.0: 8 New Security Tools (446 Total)

What's New in v0.59.0

8 New Security Analysis Tools

1. cors_safelist - Analyze CORS safelist bypass: wildcard origin, origin reflection, null origin.
2. iframe_sandbox_policy - Analyze iframe sandbox policy: missing sandbox, allow-scripts+same-origin combo.
3. report_to_header - Analyze Report-To header: missing group, invalid endpoint, deprecated report-uri.
4. nel_header - Analyze NEL header: missing report_to, invalid config, sampling rate.
5. expect_ct_header - Analyze Expect-CT header: missing enforce, max-age too short, CT enforcement.
6. cors_credentials - Analyze CORS credentials: wildcard+credentials, missing allow-credentials, insecure HTTP.
7. service_worker_scope - Analyze service worker scope: missing scope, broad root scope, HTTP registration.
8. client_hints - Analyze client hints: missing hints, insecure hints, critical-CH config.

Total: 446 tools