dev.balrog.nonprod.cloudops.mozgcp.net has failed the web security baseline
Opened this issue · 3 comments
Site https://dev.balrog.nonprod.cloudops.mozgcp.net has failed the web security baseline scan.
The failing tests are:
Strict-Transport-Security Header Not Set [10035] x 1
- https://dev.balrog.nonprod.cloudops.mozgcp.net/update/3/Firefox/33.0/20141202185629/Darwin_x86_64-gcc3-u-i386-x86_64/en-US/release/default (502 Bad Gateway)
Content Security Policy (CSP) Header Not Set [10038] x 1
- https://dev.balrog.nonprod.cloudops.mozgcp.net/update/3/Firefox/33.0/20141202185629/Darwin_x86_64-gcc3-u-i386-x86_64/en-US/release/default (502 Bad Gateway)
This issue was automatically raised.
This issue is managed automatically by the baseline scan:
- If the failing tests change then it will be updated
- If it is closed before the tests pass then a new one will be opened
- When all of the tests pass then it will be closed
Full details, including how to test for these issues locally, can be found on this Security Baseline Service dashboard.
If you have any questions or concerns please get in contact with @psiinon
It looks like this is a transient issue with reaching the backend.
The web security baseline for site https://dev.balrog.nonprod.cloudops.mozgcp.net is still failing, this issue should stay open.
I don't think dev actually works. Does stage fail?