Security Development Documention
Here some tools used to check configuration of Leshan sandbox hosted at https://leshan.eclipseprojects.io following security standard.
| Tools | Score | Links | Comments |
|---|---|---|---|
| Mozilla Observatory | ✔️ B+ (January 12, 2024 12:02 PM ) 
|
https://observatory.mozilla.org/analyze/leshan.eclipseprojects.io | Currently http-observatory#432 issue avoid us to get a A Grade. Mozilla Observatory 2.0 launches on January 25, 2024. New security scoring standards will apply. |
| SSL Labs | ✔️ A+ (08 Jan 2024 14:54:52 UTC) | https://www.ssllabs.com/ssltest/analyze?d=leshan.eclipseprojects.io | |
| Security Headers | ✔️ A (08 Jan 2024 14:52:57 UTC ) | https://securityheaders.com/?q=https%3A%2F%2Fleshan.eclipseprojects.io%2F | There is a shields.io badge for it but there is currently an issue with it securityheaders-bugs#110. |
| Immuniweb SSL Tests | ✔️ A+ (Jan 5th, 2024 18:18:20 GMT+1) | https://www.immuniweb.com/ssl/leshan.eclipseprojects.io/EnXfNTsb/ | |
| Immuniweb Website Tests | ✔️ A (Jan 8th, 2024 15:14:55 GMT+1) | https://www.immuniweb.com/websec/leshan.eclipseprojects.io/dJuBr5PI/ |
