lighthouse-security

lighthouse-security copied to clipboard

This pull request fixes one or more vulnerable packages in the npm dependencies of this project. See the [Snyk test report](https://snyk.io/test/github/voorhoede/lighthouse-security) for this project for details. The PR includes: -...

snyk-bot

Add Greenkeeper badge 🌴

2

Let’s get started with automated dependency management for lighthouse-security :muscle: ⚠️ We found a `package-lock.json` file in this repository. You need to use [greenkeeper-lockfile](https://github.com/greenkeeperio/greenkeeper-lockfile) to make sure it gets updated...

greenkeeper[bot]

Add Greenkeeper to keep dependencies up to date

1

Requires #6

jbmoelker

jbmoelker

Note: is much easier to achieve after #58 is merged.

jbmoelker

Group audits?

1

For instance in: * **Secure connection**: HTTPS, redirect HTTP -> HTTPS, SSL grade, ... * **Secure cookies**: Secure Cookie, HttpOnly, ... * **Secure UX**: Paste Password, opens external links with...

jbmoelker

Use Safe Browsing & Phishtank Service to audit for malware

1

See [Safe Browsing Lookup API](https://developers.google.com/safe-browsing/v4/lookup-api) and [Phishtank API](https://www.phishtank.com/api_info.php). Inspired by [Passmarked's Malware module](https://github.com/passmarked/malware).

jbmoelker

CSP Meta Audit should test if value is valid

1

Also are multiple `` tags supported?

jbmoelker

Don't merge this PR yet. Things that need to be discussed: * error handling * max duration of ssl test Result if passing (used `https://rabobank.nl`): Result if failing due to...

jbmoelker

The [DNT Header](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/DNT) tells servers to Do Not Track a user. We can audit if a site respects this header. So are Google Analytics, Hotjar, ... loaded if the header...

jbmoelker