Skip to content
This repository has been archived by the owner on Nov 4, 2024. It is now read-only.

Issues: mozilla/http-observatory-website

59 Open 159 Closed
59 Open 159 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

CSP header for API endpoints
#315 opened Aug 19, 2024 by cosieLq
Mozilla Observatory Website security issues
#305 opened Oct 4, 2023 by shetakeyourmoneyleaveupoor
2
Observatory could tell (and attribute points?) to servers implementing HTTP/2, HTTP/3
#293 opened Feb 13, 2023 by JulienPalard
No +5 for HSTS when preloaded
#292 opened Jan 23, 2023 by doffiz
2
Bad score should not be assigned to sites claiming http://127.0.0.1 in their Content-Security-Policy header scoring
#289 opened Dec 23, 2022 by Idopte
scan results are not displayed
#279 opened Aug 17, 2022 by FGAGwendalG
7
Trailing Slash Breaks Layout bug
#272 opened Apr 20, 2022 by justinferrell
frame-ancestors not recognized with default-src 'none'
#266 opened Jan 27, 2022 by arigon
4
This site returned an HTTP status code other than 200 (OK), which may cause its results to be inaccurate.
#265 opened Dec 17, 2021 by demogit-code
7
Recognize http code 308
#264 opened Dec 9, 2021 by xuchenCN
"header cannot be recognized" when duplicated
#262 opened Nov 16, 2021 by Virsacer
2
Does not send Upgrade-Insecure-Requests when checking for HTTPS redirect
#260 opened Sep 20, 2021 by CyberShadow
SRI check on WP, HSTS site
#259 opened Sep 16, 2021 by churchthecat
3
CSP to loopback addresses with http should be considered safe
#258 opened Aug 27, 2021 by fdelapena
1
Change third party from https://tls.imirhil.fr/ to https://cryptcheck.fr/
#256 opened Jul 27, 2021 by ZeikoFr
1
Alter scoring for X-XSS-Protection or remove
#254 opened Jul 15, 2021 by roycewilliams
@Cptwafflez
3
TLS Observatory hangs whenever TLS 1.3 is enabled (including the recommended "Modern" config)
#244 opened Feb 26, 2021 by weinzierl
Some sites are jumping between grades daily
#243 opened Feb 17, 2021 by nukeador
1
Incorrect CSP analysis of eval()
#240 opened Jan 22, 2021 by shaialon
Decomission the SSH Tab
#234 opened Nov 11, 2020 by claudijd
1
1
HSTS preloaded, no extra points added
#230 opened Aug 20, 2020 by janpluta
5
The the page for forum.vodafone.ro is stuck?
#226 opened Jun 27, 2020 by Caspy7
7
Multiple X-Content-Type-Options headers not recognised
#223 opened Jun 1, 2020 by rgrey
1
SSH Scan Failed for ed25519-only servers question
#220 opened May 27, 2020 by 532910
28
Upgrade AWS RDS http-observatory-dev in us-west-2 infosec-dev by Apr 13
#213 opened Apr 1, 2020 by gene1wood
ProTip! Updated in the last three days: updated:>2025-02-15.