#
hsts
Here are 63 public repositories matching this topic...
enhancement
New feature or request
help wanted
Extra attention is needed
good first issue
Good for newcomers
hacktoberfest
Issues folks can work on for Hacktoberfest
drwetter
commented
Jan 31, 2022
Which version are you referring to
3.1dev
We list not all RFCs in ~/doc/ which we refer to in testssl.sh.
List used RFCs: grep RFC -w ./testssl.sh | grep -v TLS_CIPHER | grep RFC | sed 's/^.*RFC/RFC/' | sort -u
List RFCs referred to: grep -w RFC doc/testssl.1
Manages application of security headers with many safe defaults
ruby
rack
secure-headers
csp
hsts
referrer-policy
middleware
xframe-options
cookie
content-security-policy
-
Updated
Jun 2, 2022 - Ruby
An upgradable boilerplate for Progressive web applications (PWA) with server side rendering, build with SEO in mind and achieving max page speed and optimized user experience.
react
javascript
hsts
babel
pwa
ssr
seo
expressjs
code-splitting
hstspreload
hot-reload
es7
srcset
pwa-apps
webpack4
reactpwa
-
Updated
Apr 18, 2022 - TypeScript
Scan domains and return data based on HTTPS best practices
-
Updated
Mar 31, 2022 - Python
PHP Secure Headers
php
secure-headers
csp
hsts
referrer-policy
laravel
laravel-package
content-security-policy
expect-ct
feature-policy
clear-site-data
-
Updated
May 15, 2022 - PHP
aidantwoods
commented
Dec 22, 2017
As hinted in aidantwoods/SecureHeaders#67 (comment), the public API could do with some better coverage.
Check any website (or set of websites) for insecure security headers.
http
security
csp
hsts
referrer-policy
xframe-options
content-security-policy
headers
expect-ct
feature-policy
-
Updated
Jun 2, 2022 - Python
CryptoNice is both a command line tool and library which provides the ability to scan and report on the configuration of SSL/TLS for your internet or internal facing web services. Built using the sslyze API and ssl, http-client and dns libraries, cryptonice collects data on a given domain and performs a series of tests to check TLS configuration and supporting protocols such as HTTP2 and DNS.
dns
tls
ssl
security
hsts
crypto
https
http2
report
ssl-certificates
appsec
tls-certificate
tls-scan
security-tools
https-certificate
-
Updated
Aug 4, 2021 - Python
NGINX Module for sending security headers
-
Updated
Mar 19, 2022 - C
Forced Man-In-The-Middle HTTPs-Avoiding Reverse Proxy
-
Updated
Oct 23, 2019 - Python
Module for Nuxt.js to configure security headers and more
csp
hsts
referrer-policy
nuxt
content-security-policy
nuxt-module
security-txt
feature-policy
strict-transport-security
-
Updated
May 11, 2022 - JavaScript
Lib.Web.Mvc is a library which contains some helper classes for ASP.NET MVC such as strongly typed jqGrid helper, attribute and helper providing support for HTTP/2 Server Push with Cache Digest, attribute and helpers providing support for Content Security Policy Level 2, FileResult providing support for Range Requests, action result and helper providing support for XSL transformation and more.
-
Updated
Mar 22, 2022 - C#
Lib.AspNetCore.Security is a library which provides security features like Content Security Policy, Strict Transport Security or Expect-CT for ASP.NET Core
-
Updated
Jan 10, 2022 - C#
A tiny (5.59Mb light standalone binary) static web server with customizable behavior, secure and monitored by default.
lightweight
golang
security
hsts
spa
owasp
http-header
http-server
file-server
content-security-policy
-
Updated
May 28, 2022 - Go
Fully-featured tool that combines state-of-the-art TLS analyzers with a report system that suggests appropriate mitigations and shows the full set of viable attacks.
tls
hsts
robot
https
crime
rc4
certificate-transparency
poodle
attack-trees
mitigations
breach
sloth
drown
sweet32
3shake
bar-mitzvah
lucky13
-
Updated
May 16, 2022 - Python
This plugin provides native SSL instrumentation for monitoring, including: hostname and chain verification, cert expiry, and Qualys SSL Labs reporting
-
Updated
Dec 25, 2021 - Ruby
Provides support for configuring various http headers that are important for web services.
-
Updated
Jun 3, 2022 - Java
PSR-15 middleware to redirect to https and adds the Strict-Transport-Security header
-
Updated
Oct 29, 2021 - PHP
A small package for ASP.Net (Core) to automatically configure secure HTTP-Headers
security
csp
hsts
csharp
dotnet
https
dotnet-core
asp-net-core
asp-net
http-headers
security-headers
brickmakers
-
Updated
Mar 22, 2022 - C#
Improve this page
Add a description, image, and links to the hsts topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the hsts topic, visit your repo's landing page and select "manage topics."


Feature request
Place the
access_loganderror_logdirectives inside the main server block instead of http block.Feature description
Disable
access_logat http block:File: /etc/nginx/nginx.conf
Enable per site
access_loganderror_logat main server block:File: /etc/nginx/