Sha256: ac024aa51f8881bf99c891450ed13f8d8c97f59873cd87386ea14250f33b297d
Contents?: true
Size: 778 Bytes
Versions: 18
Compression:
Stored size: 778 Bytes
Contents
# Copyright (c) 2023 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
# frozen_string_literal: true
require 'contrast/agent/assess/rule/response/header_rule'
require 'contrast/utils/string_utils'
module Contrast
module Agent
module Assess
module Rule
module Response
# These rules check that the HTTP Headers include CSP header types
class CspHeaderMissing < HeaderRule
HEADER_KEYS = %w[Content-Security-Policy X-Content-Security-Policy X-Webkit-CSP].cs__freeze
ACCEPTED_VALUES = [/(.)/].cs__freeze
DEFAULT_SAFE = false
def rule_id
'csp-header-missing'
end
end
end
end
end
end
end
Version data entries
18 entries across 18 versions & 1 rubygems