Sha256: 40af8fdc8c47e75d3ae0940c13221f64e7bcb6de8936a646b36171bf759b6d4a
Contents?: true
Size: 799 Bytes
Versions: 18
Compression:
Stored size: 799 Bytes
Contents
# Copyright (c) 2023 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
# frozen_string_literal: true
require 'contrast/agent/assess/rule/response/header_rule'
require 'contrast/utils/string_utils'
module Contrast
module Agent
module Assess
module Rule
module Response
# These rules check the content of the HTTP Response to determine if the headers contains the required header
class ClickJacking < HeaderRule
HEADER_KEYS = %w[X-Frame-Options].cs__freeze
ACCEPTED_VALUES = [/^deny/i, /^sameorigin/i].cs__freeze
DEFAULT_SAFE = false
def rule_id
'clickjacking-control-missing'
end
end
end
end
end
end
end
Version data entries
18 entries across 18 versions & 1 rubygems