Skip to content

v0.60.0: 8 New Security Tools (454 Total)

Choose a tag to compare

View all tags
@chengganping-ship-it chengganping-ship-it released this 18 Aug 09:31
· 21 commits to main since this release
v0.60.0
f070df3

What's New in v0.60.0

8 New Security Analysis Tools

  1. expose_headers - Analyze Expose-Headers: sensitive headers exposed, missing expose, wildcard.
  2. redirect_chain - Analyze redirect chain: HTTP downgrade, open redirect, missing hop limit.
  3. url_parser_confusion - Analyze URL parser confusion: backslashes, embedded credentials, dangerous protocols.
  4. websocket_upgrade - Analyze WebSocket upgrade: insecure ws://, missing origin, no message limits.
  5. cross_origin_resource_policy - Analyze Cross-Origin-Resource-Policy: missing CORP, unsafe cross-origin, mismatched.
  6. hsts_include_subdomains - Analyze HSTS includeSubDomains: missing directive, no preload, short max-age.
  7. mixed_content - Analyze mixed content: active HTTP resources, passive content, missing upgrade.
  8. cors_max_age - Analyze CORS Max-Age: too long, missing, negative value.

Total: 454 tools

Assets 2
Loading