08766d47f4
When an HTTPS response carries a Strict-Transport-Security header, the received policy is now respected. Subsequent HTTP requests to a known HSTS host are upgraded to HTTPS before the fetch algorithm makes further decisions such as CORS and mixed content. Fixes tpexpress.co.uk, where an XHR redirects HTTPS -> HTTP -> HTTPS, relying on a HSTS policy received on the document response to avoid the CORS failure. |
||
|---|---|---|
| .. | ||
| CMakeLists.txt | ||
| ConnectionFromClient.cpp | ||
| ConnectionFromClient.h | ||
| Forward.h | ||
| main.cpp | ||
| PageHost.cpp | ||
| PageHost.h | ||
| WorkerHost.cpp | ||
| WorkerHost.h | ||