FAQ

  • GitHub GitHub Repo stars
  • Discord Discord Server
  • ✨ New! Try the OpenAPI Doctor ✨ The OpenAPI Doctor

    owaspHostsHttps


    owaspCheckErrorResponse will check if server hosts use HTTPS (not HTTP)

    Example ruleset configuration

    my-security-rule:
      description:  Checks that server hosts use HTTPS (not HTTP)
      type: validation
      given: $
      then:
        function: owaspHostsHttps
    

    Used by the following rules: