mozilla/http-observatory-website

Issues

• HSTS preloaded, no extra points added

  #230 opened 4 years ago by janpluta
  5

• No +5 for HSTS when preloaded

  #292 opened a year ago by doffiz
  2

• Alter scoring for X-XSS-Protection or remove

  #254 opened 3 years ago by roycewilliams
  3

• Change third party from https://tls.imirhil.fr/ to https://cryptcheck.fr/

  #256 opened 3 years ago by ZeikoFr
  1

• CSP to loopback addresses with http should be considered safe

  #258 opened 3 years ago by fdelapena
  1

• Mozilla Observatory Website security issues

  #305 opened 9 months ago by shetakeyourmoneyleaveupoor
  2

• This site returned an HTTP status code other than 200 (OK), which may cause its results to be inaccurate.

  #265 opened 3 years ago by demogit-code
  7

• TLS Observatory reports "untrusted or invalid certificate" if the cert chain contains the expired "DST Root CA X3" cert cross-signing the "ISRG Root X1" cert for Let's Encrypt

  #291 opened 7 months ago by JulienPalard
  6

• scan results are not displayed

  #279 opened 2 years ago by FGAGwendalG
  7

• Add a LICENSE file

  #294 opened a year ago by danielnazer
  1

• Observatory could tell (and attribute points?) to servers implementing HTTP/2, HTTP/3

  #293 opened a year ago by JulienPalard
  0

• Bad score should not be assigned to sites claiming http://127.0.0.1 in their Content-Security-Policy header

  #289 opened 2 years ago by Idopte
  0

• frame-ancestors not recognized with default-src 'none'

  #266 opened 2 years ago by arigon
  4

• SSH Observatory (rubidus.com) is gone

  #280 opened 2 years ago by dougwaldron
  1

• Characters deleted out of URL field

  #274 opened 2 years ago by planeflyer1000
  4

• Sites behind CloudFlare Bot protection can't be scanned

  #269 opened 2 years ago by ybh10
  3

• Missing LICENSE file

  #282 opened 2 years ago by TechnologyClassroom
  1

• bug with processing CSP

  #284 opened 2 years ago by mrl5
  4

• "header cannot be recognized" when duplicated

  #262 opened 3 years ago by Virsacer
  2

• Trailing Slash Breaks Layout

  #272 opened 2 years ago by justinferrell
  0

• FAQ links to non-existent site (htbridge.com/ssl)

  #273 opened 2 years ago by dougwaldron
  1

• Let's encrypt ECDSA certificate always gives untrusted or invalid certificate error.

  #263 opened 2 years ago by nakoo
  5

• TLS Observatory not opening: CSP script-src issue?

  #255 opened 2 years ago by ankon
  2

• Scan does not run

  #270 opened 2 years ago by rugk
  1

• Recognize http code 308

  #264 opened 3 years ago by xuchenCN
  0

• Not detecting framce-ancestors and form-action

  #261 opened 3 years ago by Macleykun
  2

• SRI check on WP, HSTS site

  #259 opened 3 years ago by churchthecat
  3

• add support to observer urls with path

  #219 opened 4 years ago by 532910
  4

• Does not send Upgrade-Insecure-Requests when checking for HTTPS redirect

  #260 opened 3 years ago by CyberShadow
  0

• Some sites are jumping between grades daily

  #243 opened 3 years ago by nukeador
  1

• WAF as a Compensating Control?

  #246 opened 3 years ago by MClearnsNow
  1

• TLS Observatory hangs whenever TLS 1.3 is enabled (including the recommended "Modern" config)

  #244 opened 3 years ago by weinzierl
  0

• Improve navbar

  #241 opened 3 years ago by himanshu007-creator
  1

• Incorrect CSP analysis of `eval()`

  #240 opened 3 years ago by shaialon
  0

• bug: Fail on TLS 1.3-only

  #238 opened 4 years ago by annainfo
  7

• Decomission the SSH Tab

  #234 opened 4 years ago by claudijd
  1

• SRI failed because of external script

  #225 opened 4 years ago by d0xx0b
  1

• SSH Observatory broken due to expired certificate

  #228 opened 4 years ago by tomwassenberg
  2

• The the page for forum.vodafone.ro is stuck?

  #226 opened 4 years ago by Caspy7
  7

• HTTP Observatory stuck on loading results

  #214 opened 4 years ago by ChrisF999
  5

• wrong Complete Results hstspreload.org link

  #222 opened 4 years ago by 532910
  4

• Observatory accessible via unsecure domain

  #224 opened 4 years ago by nusa-gr1
  2

• Multiple X-Content-Type-Options headers not recognised

  #223 opened 4 years ago by rgrey
  1

• wrong HSTS max-age shown

  #221 opened 4 years ago by 532910
  4

• SSH Scan Failed for ed25519-only servers

  #220 opened 4 years ago by 532910
  28

• Possible scoring issue on Mozilla Observatory

  #215 opened 4 years ago by mktl73
  5

• Upgrade AWS RDS http-observatory-dev in us-west-2 infosec-dev by Apr 13

  #213 opened 4 years ago by gene1wood
  0

• Observatory claims CSP cannot be parsed.

  #211 opened 4 years ago by ayesaac
  2

• Observatory stucks at LOADING RESULTS

  #209 opened 4 years ago by speciale
  2

• Observatory may show incorrect HSTS information

  #210 opened 4 years ago by jiggyfiz
  3