-
- Downloads
Bug 1870262 - a subdomain of any HSTS superdomain that asserts...
Bug 1870262 - a subdomain of any HSTS superdomain that asserts includeSubdomains is HSTS (ESR115) r=jschanck, a=dmeehan Previously, the HSTS implementation would only consider the first superdomain that had any HSTS information and use the presence or absence of the includeSubdomains directive to determine if the subdomain was HSTS. However, the specification actually stipulates that if any superdomain that is HSTS asserts includeSubdomains, the subdomain is HSTS. Differential Revision: https://phabricator.services.mozilla.com/D197550
Showing
- security/manager/ssl/nsSiteSecurityService.cpp 26 additions, 27 deletionssecurity/manager/ssl/nsSiteSecurityService.cpp
- security/manager/ssl/nsSiteSecurityService.h 3 additions, 4 deletionssecurity/manager/ssl/nsSiteSecurityService.h
- security/manager/ssl/tests/unit/test_sts_preloadlist_perwindowpb.js 5 additions, 2 deletions...anager/ssl/tests/unit/test_sts_preloadlist_perwindowpb.js
Loading
Please register or sign in to comment