mirror of
https://github.com/xcat2/xcat-core.git
synced 2026-09-05 12:37:54 +00:00
Vinícius Ferrão
06eced0951
Signed-off-by: Vinícius Ferrão <2031761+viniciusferrao@users.noreply.github.com>
31 lines
1.1 KiB
Plaintext
31 lines
1.1 KiB
Plaintext
start:httpd_security_headers_install
|
|
description:verify xcat.conf sets the security response headers on /install
|
|
label:mn_only,ci_test,httpd
|
|
cmd:curl -sSI --max-time 15 http://localhost/install/ 2>&1
|
|
check:rc==0
|
|
check:output=~X-Frame-Options:\s*SAMEORIGIN
|
|
check:output=~X-Content-Type-Options:\s*nosniff
|
|
check:output=~Content-Security-Policy:\s*script-src
|
|
check:output=~X-Permitted-Cross-Domain-Policies:\s*none
|
|
end
|
|
|
|
start:httpd_security_headers_tftpboot
|
|
description:verify xcat.conf sets the security response headers on /tftpboot
|
|
label:mn_only,ci_test,httpd
|
|
cmd:curl -sSI --max-time 15 http://localhost/tftpboot/ 2>&1
|
|
check:rc==0
|
|
check:output=~X-Frame-Options:\s*SAMEORIGIN
|
|
check:output=~X-Content-Type-Options:\s*nosniff
|
|
check:output=~Content-Security-Policy:\s*script-src
|
|
check:output=~X-Permitted-Cross-Domain-Policies:\s*none
|
|
end
|
|
|
|
start:httpd_server_banner_masked
|
|
description:verify ServerTokens Prod masks the Apache version in the Server header
|
|
label:mn_only,ci_test,httpd
|
|
cmd:curl -sSI --max-time 15 http://localhost/install/ 2>&1
|
|
check:rc==0
|
|
check:output=~Server:\s*Apache
|
|
check:output!~Apache/[0-9]
|
|
end
|