Open on HackerOneSign in

Uzbey · Report #17239

Missing HSTS (Strict Transport Security)

Validstatus

2upvotes

29 Aug 2014disclosed

How it was found

https://www.ssllabs.com/ssltest/analyze.html?d=https://staging.uzbey.com

Reference: http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security https://www.owasp.org/index.php/HTTP_Strict_Transport_Security http://dev.chromium.org/sts

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original