add support to observer urls with path
532910 opened this issue · 4 comments
Trying to test https://riot.im/app/ it cut's off the app/, takes riot.im that redirects to about.riot.im and scans it. So there is no way to check https://riot.im/app/.
The public observatory can only test the root website for any given domain, to protect against various security and misuse concerns. You can use the local scanner or run your own private instance of the Observatory (see the README at mozilla/http-observatory) to scan non-root sites such as what you linked.
Could you explain what security and misuse concerns can be exploited via non-root url?
The same concerns with custom SSH ports in #119 apply to custom paths in this issue. This reply in particular may help with understanding why non-default paths (and ports) aren't offered as a public service: #119 (comment)
I just build a docker image to simplify httpobs-local-scan commande line usage.
docker run --rm famaridon/http-observatory:latest example.com --format report