mozilla-releng/balrog

dev.balrog.nonprod.cloudops.mozgcp.net has failed the web security baseline

Opened this issue · 3 comments

moz-hwine commented

Site https://dev.balrog.nonprod.cloudops.mozgcp.net has failed the web security baseline scan.

The failing tests are:

Strict-Transport-Security Header Not Set [10035] x 1

Content Security Policy (CSP) Header Not Set [10038] x 1

This issue was automatically raised.

This issue is managed automatically by the baseline scan:

  • If the failing tests change then it will be updated
  • If it is closed before the tests pass then a new one will be opened
  • When all of the tests pass then it will be closed

Full details, including how to test for these issues locally, can be found on this Security Baseline Service dashboard.
If you have any questions or concerns please get in contact with @psiinon

tomprince commented

It looks like this is a transient issue with reaching the backend.

moz-hwine commented

The web security baseline for site https://dev.balrog.nonprod.cloudops.mozgcp.net is still failing, this issue should stay open.

bhearsum commented

I don't think dev actually works. Does stage fail?