Issues

• Feature Request: remove the API deprecated in version 11

  branch requiredenhancementversion 12
  GaProgMan/OwaspHeaders.Core#269 · Filter by author jamie-taylor-rjj opened on Sep 30, 2026
  

• Feature Request: upgrade the GitHub Actions in our workflows automatically each month

  branch requireddependenciesenhancement
  GaProgMan/OwaspHeaders.Core#268 · Filter by author jamie-taylor-rjj opened on Sep 30, 2026
  

• Feature Request: confirm Signed-Releases scores 10 once version 11 ships

  branch requiredenhancementversion 11
  GaProgMan/OwaspHeaders.Core#264 · Filter by author jamie-taylor-rjj opened on Sep 29, 2026
  

• Feature Request: revisit CodeQL after the .NET 11 release

  branch requiredenhancement
  GaProgMan/OwaspHeaders.Core#259 · Filter by author jamie-taylor-rjj opened on Sep 24, 2026
  

• Feature Request: update the CodeQL workflow now that CodeQL supports .NET 10

  branch requiredenhancementversion 11
  GaProgMan/OwaspHeaders.Core#258 · Filter by author jamie-taylor-rjj opened on Sep 24, 2026
  

• Flaky performance test: PerformanceTest_ClearSiteData_ProcessingTime fails on the first run after substantial changes

  branch requiredbugversion 11
  GaProgMan/OwaspHeaders.Core#247 · Filter by author jamie-taylor-rjj opened on Sep 14, 2026
  

• Feature Request: compute the UseX flags from their configuration objects

  branch requiredenhancement
  GaProgMan/OwaspHeaders.Core#241 · Filter by author jamie-taylor-rjj opened on Sep 11, 2026
  

• Bug report: a null entry in SetUrlsToIgnore throws a NullReferenceException on every request

  branch requiredbugversion 11
  GaProgMan/OwaspHeaders.Core#239 · Filter by author jamie-taylor-rjj opened on Sep 8, 2026
  1

  

• Feature Request: Roslyn analyzer enforcing OwaspHeaders.Core usage rules

  branch requiredenhancement
  GaProgMan/OwaspHeaders.Core#237 · Filter by author jamie-taylor-rjj opened on Sep 8, 2026
  

• Feature Request: Run zizmor against our GitHub Actions workflows in CI

  branch requiredenhancement
  GaProgMan/OwaspHeaders.Core#235 · Filter by author jamie-taylor-rjj opened on Sep 7, 2026

• CI test filter "Category!=Performance" is silently ignored, so the performance test runs on every build

  bug
  GaProgMan/OwaspHeaders.Core#234 · Filter by author jamie-taylor-rjj opened on Aug 14, 2026

• Feature Request: Upgrade xUnit to v3

  branch requiredenhancementversion 11
  GaProgMan/OwaspHeaders.Core#226 · Filter by author jamie-taylor-rjj opened on May 27, 2026
  2

  

• Feature Request: migrate away from Moq

  branch requiredenhancementversion 11
  GaProgMan/OwaspHeaders.Core#225 · Filter by author jamie-taylor-rjj opened on May 27, 2026
  

• Bug report: Possible Null Ref

  branch requiredbugversion 11
  GaProgMan/OwaspHeaders.Core#220 · Filter by author jamie-taylor-rjj opened on May 27, 2026
  1

  

• Feature Request: Content Security Policy per url

  branch requiredenhancement
  GaProgMan/OwaspHeaders.Core#212 · Filter by author jamie-taylor-rjj opened on Apr 1, 2026
  

• Feature Request: Permission-Policy

  branch requiredenhancement
  GaProgMan/OwaspHeaders.Core#200 · Filter by author jamie-taylor-rjj opened on Nov 27, 2025
  

• Feature Request: X-DNS-Prefetch-Control header

  branch requiredenhancement
  GaProgMan/OwaspHeaders.Core#199 · Filter by author jamie-taylor-rjj opened on Nov 27, 2025
  

• Feature Request: Expect-CT has been deprecated by OWASP

  branch requiredenhancementversion 11
  GaProgMan/OwaspHeaders.Core#198 · Filter by author jamie-taylor-rjj opened on Nov 27, 2025
  

• Clear-Site-Data object does not support 'executionContexts' as it is not a widely supported value

  GaProgMan/OwaspHeaders.Core#190 · Filter by author jamie-taylor-rjj opened on Oct 1, 2025

• Configure the middleware with a delegate, and validate the configuration at startup

  enhancementversion 11
  GaProgMan/OwaspHeaders.Core#59 · Filter by author GaProgMan opened on Nov 19, 2019
  1

  

• Set-Cookie header is not supported

  branch requiredenhancementhelp wanted
  GaProgMan/OwaspHeaders.Core#45 · Filter by author GaProgMan opened on Jul 22, 2019
  1