Skip to content

Commit e5e0310

Browse files
committed
docs: Fix URLs to legacy OWASP TLS Cipher String Cheat Sheet
1 parent 3d93aa7 commit e5e0310

File tree

3 files changed

+5
-5
lines changed

3 files changed

+5
-5
lines changed

README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ Examples for usage with Angular and React are located in the `examples` director
3737
- **Content Security Policy**: Restrictive by default, with automatic whitelisting for server API endpoints.
3838
- **Referrer Policy**: Disabled by default to prevent leakage.
3939
- **Content Type Sniffing**: Disabled by default.
40-
- **HTTPS**: Enforced via HSTS if enabled; uses [recommended OWASP protocols and cipher suites.](https://cheatsheetseries.owasp.org/cheatsheets/TLS_Cipher_String_Cheat_Sheet.html)
40+
- **HTTPS**: Enforced via HSTS if enabled; uses [recommended OWASP protocols and cipher suites.](https://github.com/OWASP/CheatSheetSeries/blob/1e07c6c894f98af58d8a417eb8df1b20e1b3337e/cheatsheets/TLS_Cipher_String_Cheat_Sheet.md)
4141
- **Non-Root User**: The container runs as a non-root user but can bind to ports 80 and 443.
4242
- **Source Maps**: Disabled by default.
4343
- **Read-only Root Filesystem**: [Supported at container runtime](#read-only-root-filesystem-support)
@@ -128,7 +128,7 @@ default:
128128
ssl_certificate: /etc/ssl/default.crt
129129
ssl_certificate_key: /etc/ssl/default.key
130130
# Configures supported TLS protocols and cipher suites with recommended value
131-
# https://cheatsheetseries.owasp.org/cheatsheets/TLS_Cipher_String_Cheat_Sheet.html
131+
# https://github.com/OWASP/CheatSheetSeries/blob/1e07c6c894f98af58d8a417eb8df1b20e1b3337e/cheatsheets/TLS_Cipher_String_Cheat_Sheet.md
132132
owasp_cipher_string: A
133133
http2_enabled: true
134134
keepalive:

config/.internal_default.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ default:
4242
ssl_certificate: /etc/ssl/default.crt
4343
ssl_certificate_key: /etc/ssl/default.key
4444
# Configures supported TLS protocols and cipher suites with recommended value
45-
# https://cheatsheetseries.owasp.org/cheatsheets/TLS_Cipher_String_Cheat_Sheet.html
45+
# https://github.com/OWASP/CheatSheetSeries/blob/1e07c6c894f98af58d8a417eb8df1b20e1b3337e/cheatsheets/TLS_Cipher_String_Cheat_Sheet.md
4646
owasp_cipher_string: A
4747
http2_enabled: true
4848
keepalive:

config/templates/owasp.tmpl

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
{{- /* https://cheatsheetseries.owasp.org/cheatsheets/TLS_Cipher_String_Cheat_Sheet.html */ -}}
1+
{{- /* https://github.com/OWASP/CheatSheetSeries/blob/1e07c6c894f98af58d8a417eb8df1b20e1b3337e/cheatsheets/TLS_Cipher_String_Cheat_Sheet.md */ -}}
22
{{- define "owasp-string-protocols" -}}
33
{{- if eq . "A" -}}
44
TLSv1.2 TLSv1.3
@@ -13,7 +13,7 @@
1313
{{- end -}}
1414
{{- end -}}
1515

16-
{{- /* https://cheatsheetseries.owasp.org/cheatsheets/TLS_Cipher_String_Cheat_Sheet.html */ -}}
16+
{{- /* https://github.com/OWASP/CheatSheetSeries/blob/1e07c6c894f98af58d8a417eb8df1b20e1b3337e/cheatsheets/TLS_Cipher_String_Cheat_Sheet.md */ -}}
1717
{{- define "owasp-string-cipher-suite" -}}
1818
{{- if eq . "A" -}}
1919
TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256

0 commit comments

Comments
 (0)