DigitalTrustCenter / sectxt

security.txt parser and validator
European Union Public License 1.2
17 stars 6 forks source link

Feature/redirect check #76

Closed DigitalTrustCenter closed 3 months ago

DigitalTrustCenter commented 3 months ago

pull request to resolve issue #72 Invalid responses are not handled properly

When it checks the security.txt it's possible that the domain has a redirect configured for that url. This is allowed by the RFC. But the path should remain unchanged, if the redirects points to a different path with a valid security.txt it should still log the error that the security.txt was not found at the correct location. We add a check to see if a redirect has occured and if that is the case that the path remains the same.