Issues

• Verify authenticated scan context before active probes

  enhancementhelp wanted
  tayfuryldz/headerproof#43 · Filter by author tayfuryldz opened on Sep 29, 2026

• Discover impactful unkeyed request headers with bounded batch isolation

  enhancementhelp wanted
  tayfuryldz/headerproof#42 · Filter by author tayfuryldz opened on Sep 29, 2026
  1

• Add authenticated web cache deception with anonymous replay proof

  enhancementhelp wanted
  tayfuryldz/headerproof#41 · Filter by author tayfuryldz opened on Sep 29, 2026
  1

• Recognize documented LiteSpeed cache-hit evidence

  enhancementhelp wanted
  tayfuryldz/headerproof#40 · Filter by author tayfuryldz opened on Sep 29, 2026
  1

• Characterize cache-key participation before cache poisoning confirmation

  enhancementhelp wanted
  tayfuryldz/headerproof#39 · Filter by author tayfuryldz opened on Sep 29, 2026
  1

• Add EvidenceWriter checkpoint and stream-routing regression tests

  good first issuetests
  tayfuryldz/headerproof#38 · Filter by author tayfuryldz opened on Sep 29, 2026

• Add explicit output-directory reservation regression tests

  good first issuetests
  tayfuryldz/headerproof#37 · Filter by author tayfuryldz opened on Sep 29, 2026

• Bind OOB findings to validated matching callback tokens

  bughelp wanted
  tayfuryldz/headerproof#36 · Filter by author tayfuryldz opened on Sep 27, 2026

• Return scan-error exit status for partial URL timeouts

  buggood first issuehelp wantedtests
  tayfuryldz/headerproof#35 · Filter by author tayfuryldz opened on Sep 27, 2026

• Decode bounded Content-Encoding samples before body detectors

  enhancementhelp wanted
  tayfuryldz/headerproof#34 · Filter by author tayfuryldz opened on Sep 27, 2026

• Bind runtime template updates to verified content digests

  enhancementhelp wanted
  tayfuryldz/headerproof#32 · Filter by author tayfuryldz opened on Sep 27, 2026

• Define scope-safe redirect handling for active scans

  enhancementhelp wanted
  tayfuryldz/headerproof#31 · Filter by author tayfuryldz opened on Sep 27, 2026

• Detect tokenless state-changing HTML forms as a CSRF observation

  enhancementhelp wanted
  tayfuryldz/headerproof#30 · Filter by author tayfuryldz opened on Sep 27, 2026

• Redact configured request-header values from persisted evidence

  help wanted
  tayfuryldz/headerproof#29 · Filter by author tayfuryldz opened on Sep 27, 2026
  1

• Add atomic evidence write regression tests

  good first issue
  tayfuryldz/headerproof#27 · Filter by author tayfuryldz opened on Sep 27, 2026

• Add deterministic rate limiter and URL budget boundary tests

  good first issue
  tayfuryldz/headerproof#26 · Filter by author tayfuryldz opened on Sep 27, 2026

• Test bounded body sampling and full-response hash integrity

  good first issue
  tayfuryldz/headerproof#25 · Filter by author tayfuryldz opened on Sep 27, 2026

• Add URL input normalization and deduplication regression tests

  good first issue
  tayfuryldz/headerproof#24 · Filter by author tayfuryldz opened on Sep 27, 2026

• Add reproducible terminal demo generation script

  documentationgood first issue
  tayfuryldz/headerproof#8 · Filter by author tayfuryldz opened on Sep 26, 2026
  1

• Add evidence schema reader example

  documentationin progress
  tayfuryldz/headerproof#6 · Filter by author tayfuryldz opened on Sep 26, 2026

• Add cache fixture regression case for query-key isolation

  enhancementhelp wanted
  tayfuryldz/headerproof#5 · Filter by author tayfuryldz opened on Sep 26, 2026
  1

• Add OOB self-hosting example to documentation

  documentationgood first issue
  tayfuryldz/headerproof#4 · Filter by author tayfuryldz opened on Sep 26, 2026
  1

• Validate SARIF output against the SARIF 2.1.0 schema in tests

  enhancementin progress
  tayfuryldz/headerproof#3 · Filter by author tayfuryldz opened on Sep 26, 2026

• Add malformed headerproof.yaml configuration tests

  enhancementin progress
  tayfuryldz/headerproof#1 · Filter by author tayfuryldz opened on Sep 26, 2026