b49d000408
BIN: analyse-headers: Checks the access-control-allow-origin header
...
Another suggestion by <Dom Ingram>.
For more details on the null issue, read here:
https://w3c.github.io/webappsec-cors-for-developers/#avoid-returning-access-control-allow-origin-null
4 years ago
f669880037
BIN: analyse-headers: fix most shellcheck warnings
...
The only checks I haven't fixed are the unused variables for colours. I
may use them in the future so haven't removed them
4 years ago
2e1dff91a3
BIN: analyse-headers: note on x-frame-options if frame-ancestors present
...
If the frame-ancestors content security policy is present, the
x-frame-options warning mentions that the content security helps
mitigate against clickjacking although for greater browser support,
x-frame-options should also be used
Thanks <Dom Ingram> for the suggestion
4 years ago
1fabc27b79
BIN: analyse-headers: Adds generic version disclosure function
...
if the header contains the word "version" (case insensitively) it will
flag it as potential information disclosure
Thanks <Dom Ingram> for the suggestion
4 years ago
27b9af6327
BIN: analyse-headers: read from stdin if first arg is -
...
This makes testing much easier
4 years ago
039f4e2270
BIN: analyse-headers: Add more notes to expect-ct description
...
As pointed out by <Dom Ingram>, the expect-ct is likely to become
obsolete in June 2012
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT
4 years ago
bf132e16c2
BIN: analyse-headers: Fix incorrect reporting of SSL issues
...
It turns out the SSL flags secure and httponly are not case sensitive.
https://tools.ietf.org/html/rfc6265#section-5.2.5
I cannot find any documentation about the SameSite=Strict so I will
leave it case sensitive for now. The spec for that section is here:
https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-05#section-5.2
Thanks <Dom Ingram> for flagging this
4 years ago
69c7355225
BIN: analyse-headers: add expect-ct and start referrer-policy
4 years ago
5369861bc8
BIN: Analyse-headers: Adds to description for cookie flag
4 years ago
3665bb63a2
BIN: analyse-headers: fix error "wrap command not found"
4 years ago
97df97a48b
BIN: analyse-headers: adds feature-policy and permissions-policy checks
4 years ago
afa3f3495a
BIN: analyse-headers: Wrap text in descriptions
...
The text in descriptions is now wrapped to 80 chars. This does not
affect the headers printed at the top which are not wrapped
4 years ago
fb5d25dc6c
BIN: Adds SameSite check in analyse-headers script
...
The script will now warn you if the SameSite option is not set to Strict
on cookies.
4 years ago
c384064641
BIN: Fix webtest script when : in cookies
...
If there was a colon in a cookie, the script would misidentify insecure
cookie configurations
4 years ago
ab2c56d9b5
BIN: Adds analyse-headers script
...
The script is in early stages of development but should work for some of
the most common mis-configurtaions.
4 years ago
83f00fd4b9
BIN: Adds git dumper
...
from here: https://github.com/internetwache/GitTools/blob/master/Dumper/gitdumper.sh
4 years ago
7a4a785ac7
BIN: Adds hex2rgb script
4 years ago
bae31d87cf
BIN: Makes opout view images with sxiv
4 years ago
28386e90fb
Adds an interactive jq experement
4 years ago
c02e14dcfc
Adds some useful util bash functions
4 years ago
381c66d766
BIN: Updates git-delete-submodule to remove them if they've been moved
...
The old script assumed that submodles name and path were the same, now
that isn't the case
4 years ago
3d37f3c645
Wraps strings in double quotes
4 years ago
16fe25ba4a
Adds corp-curl script
4 years ago
085f17ab1f
Adds scripts to help with ssl testing
4 years ago
77955b1e18
Renames jwtcat to catjwt to avoid clash with 3rd party tool
4 years ago
d106799a8b
Creates script for printing jwt web tokens
4 years ago
aa9f0b967e
Adds script to download a series from iplayer
4 years ago
0fa0b5e0a5
Updates tridactylrc and adds gnvim script
...
The script simply opens a new terminal with nvim running in it, passing
any arguments directly to nvim
This is used by tridactyl to open a text box in vim
Also added some new search engines and some other keybindings
4 years ago
b19db697e8
A start to webtest script
4 years ago
0d357e8f9e
Makes linkhandler handle more
...
It now handles some peertube, more invidious and xkcd
4 years ago
c80a9ec925
Allow syncing of just inbox rather than all mailboxes
4 years ago
5490877e2e
Fixes cyberchef script
4 years ago
3f265a3c25
Makes password manager change keyboard layout when inserting
4 years ago
cecdd951dd
Makes mutt view calender invites nicely
4 years ago
b4bdba9e24
Adds getpaths script
4 years ago
c5a999d36b
Adds multicrop 2 and unrotate
4 years ago
353bb99097
Adds git-to-tikz script
4 years ago
ab56c7bdd0
Adds split-audio-book
4 years ago
b63f40300b
Adds ansi to svg script
4 years ago
495b5e3794
Stop linkhandeler from notifying
4 years ago
ac9fdea3d5
updates urlencode to work better with vim
4 years ago
0b510b8370
Makes send-from-mutt script also run notmuch new
4 years ago
d28bec4a8b
Makes reverse-sehlls rofi script use resize listener
4 years ago
4b86f98966
Stop open-youtube from notifying
4 years ago
7f0fc4c46d
Work on bookmark script
4 years ago
f8249886c3
When selecting ip, auto select if 1
4 years ago
055b266148
Adds note about dependencies
5 years ago
b537598090
Adds ocr capabilities to my screenshot script
5 years ago
4ac6ff54dc
changed profile name to headless
5 years ago
031ae34a60
Will create firefox profile
5 years ago
Jonathan Hodgson