set_scanning_defaults() reset do_ipv4_only/do_ipv6_only to false. When
no individual test is requested on the command line, count_do_variables
returns 0 and parse_cmd_line() calls set_scanning_defaults() to enable
the standard test suite, which silently wiped out the user's -4/-6
selection. As a result determine_ip_addresses() fell through to its
"scan everything" branch and scanned both the A and AAAA records,
producing one scanResult per IP.
The IP-version flags are connection options, not test-selection state,
and are already initialized in initialize_globals(), so remove the
stray resets from set_scanning_defaults().
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
run_security_headers() listed "Permissions-Policy" twice in its
header_and_svrty checklist: once as OK (since 2020) and again as INFO
(accidentally added in 12036fb). The loop matched the same header on
both iterations, emitting two entries to JSON (headerResponse) and the
terminal output. Remove the duplicate INFO entry, keeping the intended
OK classification.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
