microsoft / microsoft/CSS-Exchange
[HealthChecker]New Feature Request : IIS Http Security Headers
@dpaulson45 is already working on this.
Since Dec 6, 2024.
- Dominant language
- PowerShell
- Stars
- 1.3k
- Forks
- 395
- Avg merge
- 14h 7m
- Merged PRs (30d)
- 5
Description
Is your request related to a problem? Please describe.
The script is detecting TLS and more configuration about IIS,. There are no details for IIS Security Headers.
Microsoft announced some of articles about EXchange and IIS as below,
https://techcommunity.microsoft.com/t5/iis-support-blog/remove-unwanted-http-response-headers/ba-p/369710
But in the script there is no reviewing metric for http header details
Describe The Request
could you please add reviewing http header settings for following setting as in best practices
X Frame Options
X XSS Protection
X Content Type Options
X Permitted Cross Domain Policies
Strict Transport Security
Content Security Policy
Referrer Policy
Feature Policy
Expect CT
Additional context
Add any other context or screenshots about the feature request here.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.