Contents

module CMSScanner
  # Interesting Headers
  class Headers < InterestingFinding
    # @return [ Hash ] The headers
    def entries
      res = NS::Browser.get(url)
      return [] unless res&.headers
      res.headers
    end

    # @return [ Array<String> ] The interesting headers detected
    def interesting_entries
      results = []

      entries.each do |header, value|
        next if known_headers.include?(header.downcase)

        results << "#{header}: #{[*value].join(', ')}"
      end
      results
    end

    # @return [ Array<String> ] Downcased known headers
    def known_headers
      %w[
        age accept-ranges cache-control content-encoding content-length content-type connection date
        etag expires keep-alive location last-modified link pragma set-cookie strict-transport-security
        transfer-encoding vary x-cache x-content-security-policy x-content-type-options
        x-frame-options x-language x-permitted-cross-domain-policies x-pingback x-varnish
        x-webkit-csp x-xss-protection
      ]
    end
  end
end

Version data entries

8 entries across 8 versions & 1 rubygems

Version	Path
cms_scanner-0.0.39.4	app/models/headers.rb
cms_scanner-0.0.39.3	app/models/headers.rb
cms_scanner-0.0.39.2	app/models/headers.rb
cms_scanner-0.0.39.1	app/models/headers.rb
cms_scanner-0.0.39.0	app/models/headers.rb
cms_scanner-0.0.38.4	app/models/headers.rb
cms_scanner-0.0.38.3	app/models/headers.rb
cms_scanner-0.0.38.2	app/models/headers.rb