Goal

Place OWASP Juice Shop behind an Nginx reverse proxy and harden it with security headers, TLS, and request rate limiting — without changing app code.

Changes

Added labs/lab11/analysis/headers-http.txt
Added labs/lab11/analysis/headers-https.txt
Added labs/lab11/analysis/rate-limit-test.txt
Added labs/lab11/analysis/testssl.txt
Added labs/lab11/logs/access.log
Added labs/lab11/logs/error.log
Added labs/lab11/reverse-proxy/certs/localhost.crt
Added labs/lab11/reverse-proxy/certs/localhost.key
Added labs/submission11.md

Testing

No testing.

Artifacts & Screenshots

labs/lab11
├── analysis
│   ├── headers-http.txt
│   ├── headers-https.txt
│   ├── rate-limit-test.txt
│   └── testssl.txt
├── docker-compose.yml
├── logs
│   ├── access.log
│   └── error.log
└── reverse-proxy
    ├── certs
    │   ├── localhost.crt
    │   └── localhost.key
    └── nginx.conf

Checklist

• Task 1 — Reverse proxy compose setup
• Task 2 — Security headers verification
• Task 3 — TLS + HSTS + rate limiting + timeouts (+ testssl)
• PR has a clear and descriptive title
• Documentation has been updated if necessary
• No sensitive data or large temporary files have been committed