jab2870/Dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

BIN: analyse-headers: adds feature-policy and permissions-policy checks

Browse source
This commit is contained in:
Jonathan Hodgson 2020-12-02 09:11:52 +00:00
parent afa3f3495a
commit 97df97a48b
1 changed files with 33 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

34
bin/.bin/webtest/analyse-headers
View file

@ -269,6 +269,36 @@ Strict means the browser sends the cookie only for same-site requests\n\n"
return "$ret"
}
test_permissions-policy(){
if [ -z "$1" ]; then
echo "Permissions-Policy" | drawInBox
wecho "The Permission-Policy header replaces the Feature-Policy and is \
used to allow or disallow certain browser features or apis in the interest of \
security.\n\n"
return 3
fi
local value="$(echo "$1" | cut -d ':' -f 2- | trimWhitespace)"
}
test_feature-policy(){
if [ -z "$1" ]; then
echo "Feature-Policy" | drawInBox
wecho "The Feature-Policy header was used to allow or disallow certian \
browser features or apis. It has been superceded by the permissions-policy
header but should still be included for legacy browsers.\n\n"
return 3
fi
if ! echo "$headers" | grep -Eqi '^permissions-policy'; then
echo "Feature-Policy" | drawInBox
wecho "The Feature-Policy header was used to allow or disallow certian \
browser features or apis. It has been superceded by the permissions-policy
header but should still be included for legacy browsers.
It has been highlighted because the Permissions-policy header wasn't found.\n\n"
return 3
fi
local value="$(echo "$1" | cut -d ':' -f 2- | trimWhitespace)"
}
usage(){
echo -n "analyse-headers [OPTIONS]... URL
@ -339,7 +369,9 @@ headers="$(curl -s -I "$url")"
missingHeaders="x-frame-options
content-security-policy
x-xss-protection
x-content-type-options"
x-content-type-options
feature-policy
permissions-policy"
tmpfile="$(mktemp)"
touch "$tmpfile"