Search results

CSP header for API endpoints

Status: Open.

#315 In mozilla/http-observatory-website;

· cosieLq opened on Aug 19, 2024

Mozilla Observatory Website security issues

Status: Open.

#305 In mozilla/http-observatory-website;

· shetakeyourmoneyleaveupoor opened on Oct 4, 2023

Observatory could tell (and attribute points?) to servers implementing HTTP/2, HTTP/3

Status: Open.

#293 In mozilla/http-observatory-website;

· JulienPalard opened on Feb 13, 2023

No +5 for HSTS when preloaded

Status: Open.

#292 In mozilla/http-observatory-website;

· doffiz opened on Jan 23, 2023

Bad score should not be assigned to sites claiming http://127.0.0.1 in their Content-Security-Policy header

scoring

Status: Open.

#289 In mozilla/http-observatory-website;

· Idopte opened on Dec 23, 2022

scan results are not displayed

Status: Open.

#279 In mozilla/http-observatory-website;

· FGAGwendalG opened on Aug 17, 2022

Trailing Slash Breaks Layout

bug

Status: Open.

#272 In mozilla/http-observatory-website;

· justinferrell opened on Apr 20, 2022

frame-ancestors not recognized with default-src 'none'

Status: Open.

#266 In mozilla/http-observatory-website;

· arigon opened on Jan 27, 2022

This site returned an HTTP status code other than 200 (OK), which may cause its results to be inaccurate.

Status: Open.

#265 In mozilla/http-observatory-website;

· demogit-code opened on Dec 17, 2021

Recognize http code 308

Status: Open.

#264 In mozilla/http-observatory-website;

· xuchenCN opened on Dec 9, 2021

"header cannot be recognized" when duplicated

Status: Open.

#262 In mozilla/http-observatory-website;

· Virsacer opened on Nov 16, 2021

Does not send Upgrade-Insecure-Requests when checking for HTTPS redirect

Status: Open.

#260 In mozilla/http-observatory-website;

· CyberShadow opened on Sep 20, 2021