Sha256: 59cd9ab7beab11b8d25cb8f2a7c2e7d35cee68a9765bcf4f9d04f86863ed7191
Contents?: true
Size: 791 Bytes
Versions: 18
Compression:
Stored size: 791 Bytes
Contents
# Copyright (c) 2023 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
# frozen_string_literal: true
require 'contrast/agent/assess/rule/response/header_rule'
require 'contrast/utils/string_utils'
module Contrast
module Agent
module Assess
module Rule
module Response
# These rules check the content of the HTTP Response to determine if the response contains the needed header
class XContentType < HeaderRule
HEADER_KEYS = %w[X-Content-Type-Options].cs__freeze
ACCEPTED_VALUES = [/^nosniff/i].cs__freeze
DEFAULT_SAFE = false
def rule_id
'xcontenttype-header-missing'
end
end
end
end
end
end
end
Version data entries
18 entries across 18 versions & 1 rubygems