Web Security Audit av Francesco De Stefano
Passively audits the security posture on current page
Du treng Firefox for å bruke denne utvidinga
Metadata for utvidingar
Skjermbilde
Om denne utvidinga
The goal of this project is to build an add-on for browser that passively audits the security posture of the websites that the user is visiting. Assume that the tool is to be used on non-malicious websites, currently not under attack or compromised. Add-on wants to report security misconfigurations, or failure to use best security practices.
- Add-on tries to analysis the commonly vulnerable setting of servers: lack of use of security-relevant headers, including:
- strict-transport-security
- x-xss-protection
- content-security-policy
- x-frame-options
- x-content-type-options
- It doesn't to interfere with the functioning of the visited website.
- It doesn't tamper with request parameters, or issue requests that were not initiated by the user (it is not active scanning).
- Incrementally generate a report in a separate window.
- Each report entry have a numeric score to indicate approximately its severity, as a way to prioritise further investigation by a human analyst [Common Vulnerability Scoring System](https://en.wikipedia.org/wiki/Common_Vulnerability_Scoring_System).
### Limitations
- Add-on only works on sites that allow content scripts.
- Add-on tries to analysis the commonly vulnerable setting of servers: lack of use of security-relevant headers, including:
- strict-transport-security
- x-xss-protection
- content-security-policy
- x-frame-options
- x-content-type-options
- It doesn't to interfere with the functioning of the visited website.
- It doesn't tamper with request parameters, or issue requests that were not initiated by the user (it is not active scanning).
- Incrementally generate a report in a separate window.
- Each report entry have a numeric score to indicate approximately its severity, as a way to prioritise further investigation by a human analyst [Common Vulnerability Scoring System](https://en.wikipedia.org/wiki/Common_Vulnerability_Scoring_System).
### Limitations
- Add-on only works on sites that allow content scripts.
Vurder opplevinga di
Støtt denne utviklaren
Utviklaren av denne utvidinga spør om du kan hjelpe til med å støtte den vidare utviklinga med eit lite pengebidrag.
LøyveLes meir
Dette tillegget treng å:
- Tilgang tiil dataa dine frå alle nettsider
Meir informasjon
- Lenker for tillegg
- Versjon
- 1.0
- Storleik
- 24,75 KB
- Sist oppdatert
- 4 år sidan (13. feb. 2020)
- Liknande kategoriar
- Lisens
- Mozilla Public License 2.0
- Versjonshistorikk
Legg til i samling
Fleire utvidingar av Francesco De Stefano
- Ingen vurderingar enno
- Ingen vurderingar enno
- Ingen vurderingar enno
- Ingen vurderingar enno
- Ingen vurderingar enno
- Ingen vurderingar enno