mdn/mdn-http-observatory

View on GitHub

Backend for HTTP Observatory on MDN

Stars: 141
Forks: 34
Open beginner issues: 0
Indexed issues: 18
Avg merge: 8h 36m
Merged PRs (30d): 14

Dominant language: JavaScript
License: MPL-2.0
Last GitHub push: Sep 14, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

18 open issues indexed

Remove dead `http-equiv` meta branch from the CORP test Open

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

mdn/mdn-http-observatory#566 · Opened Jul 16, 2026
SRI test treats same registrable domain + scheme as same origin Open

p1 test: SRI

mdn/mdn-http-observatory#558 · 1 assignee · Opened Jul 15, 2026
Redirection: distinguish HTTPS-downgrade from HTTP redirect failure Open

Difficulty 4/5 3-5 days Newbie friendliness 68/100

mdn/mdn-http-observatory#557 · Opened Jul 15, 2026
Derive test `pass` from `possibleResults` instead of hardcoded allowlists Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

mdn/mdn-http-observatory#555 · 1 comment · Opened Jul 15, 2026
Observatory HTTPv2 Capabilities Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

mdn/mdn-http-observatory#509 · 8 comments · 1 reaction · Opened Apr 20, 2026
SRI: Why are protocol-relative urls punished so hard Open

p1 test: SRI

Difficulty 5/5 Over a week Newbie friendliness 35/100

mdn/mdn-http-observatory#464 · 4 comments · Opened Mar 16, 2026
HSTS only gets updated when new Observatory version gets deployed Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

mdn/mdn-http-observatory#438 · 1 comment · Opened Feb 11, 2026
IPv6-only domains do not resolve, cannot be scanned Open

blocked

Difficulty 3/5 1-2 days Newbie friendliness 45/100

mdn/mdn-http-observatory#432 · 5 comments · Opened Feb 9, 2026
Distro packaging is hard because of downloads during build Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mdn/mdn-http-observatory#348 · 2 comments · Opened Nov 11, 2025
Observatory returns a `502` error when scanning `www.bloomberg.com` Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mdn/mdn-http-observatory#347 · 1 comment · Opened Nov 5, 2025
CSP with 'unsafe-inline' reported as without Open

needs decision

mdn/mdn-http-observatory#338 · 1 comment · 1 assignee · Opened Oct 24, 2025
The CSP anaylsis component ignores a "default none" setting when recommending settings Open

needs decision

Difficulty 3/5 1-2 days Newbie friendliness 38/100

mdn/mdn-http-observatory#269 · Opened Aug 13, 2025
Integrate the `Integrity-Policy` header Open

needs decision

Difficulty 3/5 1-2 days Newbie friendliness 45/100

mdn/mdn-http-observatory#268 · 1 reaction · Opened Aug 13, 2025
SRI awards zero points with no script tags Open

needs decision

Difficulty 3/5 1-2 days Newbie friendliness 48/100

mdn/mdn-http-observatory#267 · 1 comment · 1 reaction · Opened Aug 13, 2025
Unexpected 406 error when scanning https://monitor.mozilla.org/ Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mdn/mdn-http-observatory#223 · 1 comment · Opened Apr 15, 2025
Feature Request: Add a Github badge download botton. Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

mdn/mdn-http-observatory#214 · Opened Apr 11, 2025
Relax Referrer-Policy score Open

needs decision

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

mdn/mdn-http-observatory#119 · 1 comment · Opened Nov 20, 2024
`Content-Security-Policy-Report-Only` should show detailed CSP analysis Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

mdn/mdn-http-observatory#69 · 8 comments · Opened Aug 13, 2024

mdn/mdn-http-observatory

Get new issues in your inbox