{"action":"created","issue":{"url":"https://api.github.com/repos/sullo/nikto/issues/214","labels_url":"https://api.github.com/repos/sullo/nikto/issues/214/labels{/name}","comments_url":"https://api.github.com/repos/sullo/nikto/issues/214/comments","events_url":"https://api.github.com/repos/sullo/nikto/issues/214/events","html_url":"https://github.com/sullo/nikto/issues/214","id":56635526,"number":214,"title":"case sensitive header checks cause false negatives","user":{"login":"shimmyshack","id":5890229,"avatar_url":"https://avatars.githubusercontent.com/u/5890229?v=3","gravatar_id":"","url":"https://api.github.com/users/shimmyshack","html_url":"https://github.com/shimmyshack","followers_url":"https://api.github.com/users/shimmyshack/followers","following_url":"https://api.github.com/users/shimmyshack/following{/other_user}","gists_url":"https://api.github.com/users/shimmyshack/gists{/gist_id}","starred_url":"https://api.github.com/users/shimmyshack/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/shimmyshack/subscriptions","organizations_url":"https://api.github.com/users/shimmyshack/orgs","repos_url":"https://api.github.com/users/shimmyshack/repos","events_url":"https://api.github.com/users/shimmyshack/events{/privacy}","received_events_url":"https://api.github.com/users/shimmyshack/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-02-05T07:09:25Z","updated_at":"2015-03-18T10:50:55Z","closed_at":"2015-03-18T10:50:55Z","body":"I receive these warnings when running Nikto v2.1.6 against my site which uses HSTS to force everything over TLSv1.2\r\n\r\nX-Frame-Options header is not present\r\nX-Content-Type-Options header is not set\r\nX-XSS-Protection header is not defined\r\n\r\nsource:\r\nprogram/plugins/nikto_headers.plugin \r\n\r\nSPDY is on my site, so all headers are lowercase.\r\n\r\nThese headers were confirmed to be present:\r\n\r\nx-content-type-options:nosniff\r\nx-frame-options:deny\r\nx-xss-protection:1; mode=block\r\n\r\nthanks"},"comment":{"url":"https://api.github.com/repos/sullo/nikto/issues/comments/82890271","html_url":"https://github.com/sullo/nikto/issues/214#issuecomment-82890271","issue_url":"https://api.github.com/repos/sullo/nikto/issues/214","id":82890271,"user":{"login":"tautology0","id":3503697,"avatar_url":"https://avatars.githubusercontent.com/u/3503697?v=3","gravatar_id":"","url":"https://api.github.com/users/tautology0","html_url":"https://github.com/tautology0","followers_url":"https://api.github.com/users/tautology0/followers","following_url":"https://api.github.com/users/tautology0/following{/other_user}","gists_url":"https://api.github.com/users/tautology0/gists{/gist_id}","starred_url":"https://api.github.com/users/tautology0/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tautology0/subscriptions","organizations_url":"https://api.github.com/users/tautology0/orgs","repos_url":"https://api.github.com/users/tautology0/repos","events_url":"https://api.github.com/users/tautology0/events{/privacy}","received_events_url":"https://api.github.com/users/tautology0/received_events","type":"User","site_admin":false},"created_at":"2015-03-18T10:50:55Z","updated_at":"2015-03-18T10:50:55Z","body":"It appears to work fully with tests against real world servers; so I'm going to close this as fixed. @shimmyshack, if you're still getting the problem with trunk, could you open up the call again and we'll do some more digging. Thanks!"}}