| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| | |
|
| |
|
|
|
|
|
|
|
| |
This fixes the behavior of the whitelist code so that whitelist
toggling toggles the FQDN (not the domain and all subdomains), unless
domain is explicitly used. This was the intended behavior but the old
code would automatically assume all subdomains anyways. This also
makes the new force_https stuff work correctly with FQDNs (no
subdomains) for the preloaded HSTS list.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
whitelist settings) to make all requests to that domain use the HTTPS
scheme, similar to HSTS.
Install a new file, hsts-preload, into the resource dir. This is a
regular config file with a bunch of force_https = ... lines, which is
used to implement a preloaded HSTS list. Right now all the domains in
this file, except for conformal.com and cyphertite.com, are taken
directly from chromium's preloaded HSTS list (and should be synced
with this file every so often). Also implement a new setting,
preload_strict_transport (enabled by default), to enable or disable
the loading of this preloaded HSTS list. Document force_https and
preload_strict_transport in the manpage.
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
| |
The list used is from publicsuffix.org. It gets installed
to the resource-directory as 'tld-rules'
|
| |
|
|
| |
Found by gcc!
|
| |
|
|
|
|
|
|
|
| |
First :js/pl/cookie domain save wasn't saving the actual domain. I
tried being clever to save a switch statement. FAIL.
Second I tried to save an else statement. Again FAIL.
Next time I am doing clever things please yell at me.
|
| | |
|
| |
|
|
| |
Add whitelist and settings files.
|
| |
|
|
|
| |
This reverts commit e562a275ba9277803a4a6fe89e71545268986a7b, reversing
changes made to b07b1b86ecd74b3042de4f7eb021ee0e39acb7d1.
|
| |
|