Update HSTS check#203

Draft

mcdonnnj wants to merge 9 commits into

update_hsts_logic

Commits on Aug 13, 2019

Changes HSTS header processing to more closely follow RFC specifications. Removed regex based string manipulation in favor of simple split calls.
mcdonnnj
committed
Add logic to reflect that the max-age directive is required for HSTS headers.
mcdonnnj
committed
Clarify wording in the warning message about multiple HSTS headers.
mcdonnnj
committed
Bump version from 0.6.6 to 0.6.7
jsf9k
committed
Change the directive splitting to be clearer to what's going on. Add a comment to explain the hsts_max_age check rationale.
mcdonnnj
committed
Merge branch 'update_hsts_logic' of github.com:cisagov/pshtt into update_hsts_logic
mcdonnnj
committed
Improve comment for HSTS max-age value check
jsf9k
committed
Change a check to only fail hsts on negative and non instead of zero or negative and none. Added links to relevant sections explaining multiple HSTS headers.
mcdonnnj
committed
Rework max-age comment a little
jsf9k
committed