relax assertion for X-Frame-Options to allow DENY (uppercase)

oshp / oshp-validator

Venom tests suite to validate an HTTP security response headers configuration against OSHP recommendation.

https://owasp.org/www-project-secure-headers/

GNU General Public License v3.0

100 stars 20 forks source link

Closed CalgaryMichael closed 2 years ago

CalgaryMichael commented 2 years ago

As mentioned in https://github.com/oshp/oshp-validator/issues/1, I think the assertion for X-Frame-Options should allow for both upper- and lower-cased "deny".

Tested this against the following scenarios:

righettod commented 2 years ago

Thank a lot for the PR 👍