From ad6cde996a87c8a356b28225f02c316da9b6ce85 Mon Sep 17 00:00:00 2001 From: David Cooper Date: Mon, 30 Oct 2017 11:48:48 -0400 Subject: [PATCH] Add check for the Expect-CT header This commit adds a check for the Expect-CT header to run_more_flags(). --- testssl.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/testssl.sh b/testssl.sh index 77a63b9..6ac1cd7 100755 --- a/testssl.sh +++ b/testssl.sh @@ -2315,7 +2315,7 @@ run_cookie_flags() { # ARG1: Path run_more_flags() { - local good_flags2test="X-Frame-Options X-XSS-Protection X-Content-Type-Options Content-Security-Policy X-Content-Security-Policy X-WebKit-CSP Content-Security-Policy-Report-Only" + local good_flags2test="X-Frame-Options X-XSS-Protection X-Content-Type-Options Content-Security-Policy X-Content-Security-Policy X-WebKit-CSP Content-Security-Policy-Report-Only Expect-CT" local other_flags2test="Access-Control-Allow-Origin Upgrade X-Served-By X-UA-Compatible Referrer-Policy X-UA-Compatible" local f2t line local first=true