flask-secure-headers
flask-secure-headers copied to clipboard
SimpleHeader validation only validates 1 param
SimpleHeader.check_valid seems to only end up checking 1 param before returning True, and so not all the validation happens I think.
https://github.com/twaldear/flask-secure-headers/blob/master/flask_secure_headers/headers.py#L11
Also, I am getting a validation exception for the default values, in cases where it does end up hitting the validate for report-uri.
https://github.com/twaldear/flask-secure-headers/blob/master/flask_secure_headers/core.py#L37
Defaults to /hpkp_report but
https://github.com/twaldear/flask-secure-headers/blob/master/flask_secure_headers/headers.py#L101
Says only * is valid, unless I am reading it wrong.