Sha256: 3050726e906441cdc29887377e5daa072a8014f4b69ec6944eda5f31a9dd2c3a
Contents?: true
Size: 791 Bytes
Versions: 18
Compression:
Stored size: 791 Bytes
Contents
# Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
# frozen_string_literal: true
require 'contrast/agent/assess/rule/response/header_rule'
require 'contrast/utils/string_utils'
module Contrast
module Agent
module Assess
module Rule
module Response
# These rules check the content of the HTTP Response to determine if the response contains the needed header
class XContentType < HeaderRule
HEADER_KEYS = %w[X-Content-Type-Options].cs__freeze
ACCEPTED_VALUES = [/^nosniff/i].cs__freeze
DEFAULT_SAFE = false
def rule_id
'xcontenttype-header-missing'
end
end
end
end
end
end
end
Version data entries
18 entries across 18 versions & 1 rubygems