Skip to content

Commit

Permalink
Apply suggestions from code review
Browse files Browse the repository at this point in the history
Co-authored-by: Letha <[email protected]>
Signed-off-by: Tim Smith <[email protected]>
  • Loading branch information
tas50 and misterpantz authored Aug 9, 2024
1 parent 92d1419 commit b70aa1d
Showing 1 changed file with 5 additions and 5 deletions.
10 changes: 5 additions & 5 deletions core/mondoo-http-security.mql.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -88,7 +88,7 @@ queries:
- url: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
title: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
- uid: mondoo-http-security-obfuscate-server
title: Remove Server header or obfuscate it
title: Remove or obfuscate the Server header
mql: http.get.header.params.keys.none("Server") || http.get.header.params["Server"].map(downcase).none(_ == /nginx|microsoft|apache|lsws|openresty/)
docs:
desc: |
Expand All @@ -97,7 +97,7 @@ queries:
- url: https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html#server
title: OWASP HTTP Security Response Headers Cheat Sheet
- uid: mondoo-http-security-no-x-powered-by
title: Remove all X-Powered-By headers.
title: Remove all X-Powered-By headers
mql: http.get.header.params.keys.none("X-Powered-By")
docs:
desc: |
Expand All @@ -106,7 +106,7 @@ queries:
- url: https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html#x-powered-by
title: OWASP HTTP Security Response Headers Cheat Sheet
- uid: mondoo-http-security-no-x-aspnet-version
title: Remove all X-AspNet-Version headers.
title: Remove all X-AspNet-Version headers
mql: http.get.header.params.keys.none("X-AspNet-Version")
docs:
desc: |
Expand All @@ -115,7 +115,7 @@ queries:
- url: https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html#x-aspnet-version
title: OWASP HTTP Security Response Headers Cheat Sheet
- uid: mondoo-http-security-no-x-aspnetmvc-version
title: Remove all X-AspNetMvc-Version headers.
title: Remove all X-AspNetMvc-Version headers
mql: http.get.header.params.keys.none("X-AspNetMvc-Version")
docs:
desc: |
Expand All @@ -124,7 +124,7 @@ queries:
- url: https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html#x-aspnetmvc-version
title: OWASP HTTP Security Response Headers Cheat Sheet
- uid: mondoo-http-security-no-public-key-pins
title: This header Public-Key-Pins is deprecated and should not be used anymore
title: The header Public-Key-Pins is deprecated and should not be used
mql: http.get.header.params.keys.none("Public-Key-Pins")
docs:
desc: |
Expand Down

0 comments on commit b70aa1d

Please sign in to comment.