darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-08-19 14:09:20 -04:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2025 from GSA/notify-compliance-52

Browse Source 
investigate security.txt
This commit is contained in:
Carlo Costino
2024-10-17 14:51:00 -04:00
committed by GitHub
parent 149065576f 1dbb369143
commit 185f00cd01
3 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/.well-known/security.txt Normal file
View File

@@ -0,0 +1,2 @@
Contact: mailto:notify-support@gsa.gov
Expires: 2035-10-15T23:59:59Z

6
app/main/views/security_policy.py
View File

@@ -1,4 +1,4 @@
from flask import redirect from flask import send_from_directory
from app.main import main from app.main import main
@@ -6,6 +6,4 @@ from app.main import main
@main.route("/.well-known/security.txt", methods=["GET"]) @main.route("/.well-known/security.txt", methods=["GET"])
@main.route("/security.txt", methods=["GET"]) @main.route("/security.txt", methods=["GET"])
def security_policy(): def security_policy():
# See GDS Way security policy which this implements return send_from_directory(".well-known", "security.txt")
# https://gds-way.cloudapps.digital/standards/vulnerability-disclosure.html#vulnerability-disclosure-and-security-txt
return redirect("https://vdp.cabinetoffice.gov.uk/.well-known/security.txt")

4
tests/app/main/views/test_security_policy.py
View File

@@ -11,6 +11,6 @@ import pytest
def test_security_policy_redirects_to_policy(client_request, url): def test_security_policy_redirects_to_policy(client_request, url):
client_request.get_url( client_request.get_url(
url, url,
_expected_status=302, _test_page_title=False,
_expected_redirect="https://vdp.cabinetoffice.gov.uk/.well-known/security.txt", _expected_status=200,
) )