You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
🎯 The **OWASP Secure Headers Project** (also named **OSHP**) describes HTTP response headers that your application can use to increase the security of your application. Once set, these HTTP response headers can restrict modern browsers from running into easily preventable vulnerabilities. The OWASP Secure Headers Project intends to raise awareness and use of these headers.
11
18
@@ -17,7 +24,7 @@
17
24
18
25
📚 We aim to publish reports on header usage stats, developments and changes, code libraries that make these headers easily accessible to developers on a range of platforms, and data sets concerning the general usage of these headers.
19
26
20
-
🌐 The OWASP Secure Headers Project was migrated to a [new OWASP website](https://owasp.org/www-project-secure-headers/).
27
+
🌍 The OWASP Secure Headers Project was migrated to a [new OWASP website](https://owasp.org/www-project-secure-headers/).
21
28
22
29
📁 You can still access the old website [here](https://wiki.owasp.org/index.php/OWASP_Secure_Headers_Project).
23
30
@@ -36,19 +43,28 @@
36
43
37
44
👩💻 Content editing is done with [Visual Studio Code](https://code.visualstudio.com/).
38
45
39
-
A [workspace file](project.code-workspace) is provided with [recommended extensions](.vscode/extensions.json).
46
+
📦 A [workspace file](project.code-workspace) is provided with [recommended extensions](.vscode/extensions.json).
40
47
41
48
## Automatically generated content
42
49
43
50
🏭 The folder [ci](ci) (**CI** for **C**ontinuous **I**ntegration) contains materials to generate the following content.
44
51
45
-
📝 Generate the both JSON files containing the header recommended to add and remove:
52
+
📝 Generation of the both JSON files containing the header recommended to add and remove:
53
+
54
+
* Processing is performed by this GitHub action [workflow](.github/workflows/headers-generate-json-files.yml) every time the file [tab_bestpractices.md](tab_bestpractices.md) is modified.
55
+
56
+
📝 Generation of the [markdown file](monitoring_technical_references_dashboard.md) with the update health state of all GitHub repositories mentioned in the tab named **[Technical](tab_technical.md)**:
46
57
47
-
*Generation is performed by this GitHub action [workflow](.github/workflows/headers-generate-json-files.yml) every time the file [tab_bestpractices.md](tab_bestpractices.md) is modified.
58
+
*Processing is performed by this GitHub action [workflow](.github/workflows/monitoring-technical-references-generate-dashboard.yml) every week with a cron expression indicating `At 00:00 on Sunday` or every time the file [tab_technical.md](tab_technical.md) is modified.
48
59
49
-
📝 Generate the [markdown file](monitoring_technical_references_dashboard.md)with the update health state of all GitHub repositories mentioned in the tab named **[Technical](tab_technical.md)**:
60
+
📝 Generation of the file[tab_statistics.md](tab_statistics.md)as well as [all related PNG files](assets/tab_stats_generated_images):
50
61
51
-
* Generation is performed by this GitHub action [workflow](.github/workflows/monitoring-technical-references-generate-dashboard.yml) every time the file [tab_technical.md](tab_technical.md) is modified.
62
+
* Processing is performed by this GitHub action [workflow](.github/workflows/tab-stats-headers-generate-related-files.yml) every month with a cron expression indicating `At 00:00 on day-of-month 3` or every time any of the following files is modified:
* The specified cron expression was selected because the database containing the data used by the script [tab_stats_generate_md_file.py](ci/tab_stats_generate_md_file.py) is updated on the first day of each month by the project [oshp-stats](https://github.com/oshp/oshp-stats/):
67
+
* See [here](https://github.com/oshp/oshp-stats/blob/main/.github/workflows/update-datasource.yml) for technical details.
🎯 The **OWASP Secure Headers Project** (also called **OSHP**) describes HTTP response headers that your application can use to increase the security of your application. Once set, these HTTP response headers can restrict modern browsers from running into easily preventable vulnerabilities. The OWASP Secure Headers Project intends to raise awareness and use of these headers.
## Global usage of insecure framing configuration via the header 'x-frame-options'
114
99
115
100
Provide the distribution of usage of the header 'x-frame-options' across all domains analyzed with a insecure framing configuration: value different from `DENY` or `SAMEORIGIN` including unsupported values.
## Global usage of insecure referrer configuration via the header 'referrer-policy'
121
105
122
106
Provide the distribution of usage of the header 'referrer-policy' across all domains analyzed with a insecure referrer configuration: value set to `unsafe-url` or `no-referrer-when-downgrade`.
@@ -125,21 +109,18 @@ Provide the distribution of usage of the header 'referrer-policy' across all dom
## Global usage of the Strict Transport Security 'preload' feature
130
113
131
114
Provide the distribution of usage of the '[preload](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security#preloading_strict_transport_security)' feature for the header 'strict-transport-security' across all domains analyzed.
0 commit comments