Make HTTP-Header redirects no longer be a reason for checker failure

csaf-poc / csaf_distribution

Tools to download or provide CSAF (Common Security Advisory Framework) documents.

https://csaf.io

38 stars 22 forks source link

Make HTTP-Header redirects no longer be a reason for checker failure #399

Closed JanHoefelmeyer closed 1 year ago

JanHoefelmeyer commented 1 year ago

Requirement 6 reads: Redirects SHOULD NOT be used. If they are inevitable only HTTP Header redirects are allowed.

Currently, we only allow HTTP Header redirects, but those cause the checker to fail the domain. This should only be a warning, and a domain only inflicting on the Redirects rule via HTTP Headers should still be able to pass.

JanHoefelmeyer commented 1 year ago

Solved by https://github.com/csaf-poc/csaf_distribution/pull/400