08766d47f4
When an HTTPS response carries a Strict-Transport-Security header, the received policy is now respected. Subsequent HTTP requests to a known HSTS host are upgraded to HTTPS before the fetch algorithm makes further decisions such as CORS and mixed content. Fixes tpexpress.co.uk, where an XHR redirects HTTPS -> HTTP -> HTTPS, relying on a HSTS policy received on the document response to avoid the CORS failure.
51 lines
856 B
C++
51 lines
856 B
C++
/*
|
|
* Copyright (c) 2022, The SerenityOS developers
|
|
*
|
|
* SPDX-License-Identifier: BSD-2-Clause
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include <AK/Platform.h>
|
|
#include <AK/Traits.h>
|
|
#include <LibWebView/Export.h>
|
|
|
|
namespace WebView {
|
|
|
|
class Action;
|
|
class Application;
|
|
class Autocomplete;
|
|
class BookmarkStore;
|
|
class CompositorClient;
|
|
class CookieJar;
|
|
class HistoryStore;
|
|
class HSTSStore;
|
|
class Menu;
|
|
class OutOfProcessWebView;
|
|
class ProcessManager;
|
|
class Settings;
|
|
class ViewImplementation;
|
|
class WebContentClient;
|
|
class WebWorkerClient;
|
|
class WebUI;
|
|
|
|
struct Attribute;
|
|
struct AutocompleteEngine;
|
|
struct BookmarkItem;
|
|
struct BrowserOptions;
|
|
struct ConsoleOutput;
|
|
struct CookieStorageKey;
|
|
struct DOMNodeProperties;
|
|
struct Mutation;
|
|
struct ProcessHandle;
|
|
struct SearchEngine;
|
|
struct WebContentOptions;
|
|
|
|
}
|
|
|
|
namespace AK {
|
|
|
|
template<>
|
|
struct Traits<WebView::CookieStorageKey>;
|
|
|
|
}
|