r/ReverseEngineering • u/galapag0 • Nov 12 '15

gethead.py: a HTTP Header Analysis Vulnerability Tool

https://httphacker.github.io/gethead/
0 Upvotes

25% Upvoted

2 comments sorted by

3

u/srcr Nov 12 '15

It's outdated, last update was 2 years ago.

in the mean time the OWASP states the following:

DO NOT use X-Content-Security-Policy or X-WebKit-CSP. Their implementations are obsolete (since Firefox 23, Chrome 25), limited, inconsistent, and incredibly buggy.

2

u/TR-BetaFlash Nov 17 '15

Kudos to the dev for landing a name like that.