CanuteTheGreat/http-header-auditor
Watch
1
0
Fork
You've already forked http-header-auditor
 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions
2 releases 4 tags
  • v1.2.0 268cf149ae

    http-header-auditor v1.2.0
    All checks were successful
    tests / test (3.13) (push) Successful in 23s
    Details
    tests / test (3.8) (push) Successful in 28s
    Details
    release / release (push) Successful in 29s
    Details
    Stable

    Ghost released this 2026-10-16 19:57:45 -07:00 | 17 commits to master since this release

    • Score and grade (A+ to F) in the style of the Mozilla HTTP Observatory, with --fail-on-grade.
    • New checks: HSTS preload-list eligibility, cookie __Host-/__Secure- prefix rules and script-readable
      session cookies, CORS (an Access-Control-Allow-Origin echoing any origin, with or without credentials),
      Cross-Origin-Opener/Embedder/Resource-Policy, Subresource Integrity on cross-origin scripts/stylesheets,
      Referrer-Policy strength, and the redirect chain (first hop must be HTTPS on the same host).
    • Exit codes now follow the shared convention: --fail-on (default missing) makes MISSING/FAIL
      checks exit 1, and an unreachable target exits 2. 1.x exited 0 unless a --fail-on-* flag was given;
      pass --fail-on never for the old behaviour.
    • Installable as a package: pipx install git+https://git.canutethegreat.com/CanuteTheGreat/http-header-auditor.git
      puts a http-header-auditor command on PATH (pyproject.toml, MIT license metadata).
    • --version flag.
    • Exit codes follow the shared convention: 0 = clean, 1 = findings at/above the gate, 2 = error or bad usage.
    • Every tag now publishes a Forgejo release with this changelog, the wheel, the sdist and SHA256SUMS.
    • CI installs the package with pip in a clean venv and checks --version/--help on every push.

    Install

    pipx install git+https://git.canutethegreat.com/CanuteTheGreat/http-header-auditor.git@v1.2.0
# or the wheel attached to this release:
pipx install https://git.canutethegreat.com/CanuteTheGreat/http-header-auditor/releases/download/v1.2.0/http_header_auditor-1.2.0-py3-none-any.whl
# or the single file (stdlib-only Python 3):
curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/http-header-auditor/releases/download/v1.2.0/http_header_auditor.py

    SHA-256

    09d436aceda87e7675597684402b481f3159ca232872a55e73fafe1cf5e7bab1  http_header_auditor.py
a6e4dba875c30d1999b506911f3ccf023c6ad18afe32ec7c68e4511e6e68576f  http_header_auditor-1.2.0-py3-none-any.whl
80a148d2a05da810918260f05b47fbfa05478b91e0aed5527f61c44a298c66c9  http_header_auditor-1.2.0.tar.gz
    Downloads