dmaax/ladybird
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
ladybird/Libraries/LibHTTP/HSTS
History
Luke Wilde 08766d47f4 LibWeb+LibHTTP+LibWebView: Implement HSTS 
When an HTTPS response carries a Strict-Transport-Security header, the
received policy is now respected. Subsequent HTTP requests to a known
HSTS host are upgraded to HTTPS before the fetch algorithm makes
further decisions such as CORS and mixed content.

Fixes tpexpress.co.uk, where an XHR redirects HTTPS -> HTTP -> HTTPS,
relying on a HSTS policy received on the document response to avoid the
CORS failure.
2026-05-29 22:23:33 +02:00
..
ParsedHSTSPolicy.cpp LibWeb+LibHTTP+LibWebView: Implement HSTS 2026-05-29 22:23:33 +02:00
ParsedHSTSPolicy.h LibWeb+LibHTTP+LibWebView: Implement HSTS 2026-05-29 22:23:33 +02:00