gecko-dev/netwerk
Alex Gaynor 9d47375e30 Bug 1074642 - When multiple HSTS headers are received, only consider the first. r=keeler,mcmanus
This implements a plaintext reading of RFC 6797, which says to only consider the
first, however it slightly conflicts with RFC 7230, which says that sending
multiple headers which can't be merged is illegal (except for a specific
whitelist which HSTS isn't in). Chrome also implements HSTS using RFC 6797's
description of the parsing algorithm.

r=mcmanus,keeler

MozReview-Commit-ID: E06uIk2IcEK

--HG--
extra : rebase_source : 4a67f067d2953d4b30c1019a61bbfc7073e55b3d
2017-04-20 10:03:53 -04:00
..
base Merge inbound to central, a=merge 2017-04-21 17:30:43 -07:00
build Bug 1353990 - Stop exporting brotli headers. r=gps 2017-04-06 13:44:47 +09:00
cache Bug 1342442 - Add null-check over gService in nsCacheService. r=michal 2017-03-06 05:46:00 -05:00
cache2 Bug 1350256 - Handle null entry values more gracefully. r=mayhemer 2017-04-15 04:49:00 -04:00
cookie Bug 1356165 - Log origin attributes for cookie. r=jduell 2017-04-17 11:08:54 +08:00
dns Bug 1357323 - Remove support for gonk in the build system. r=gps 2017-04-18 16:56:09 +09:00
ipc Bug 1345094 - make http redirects to file:// uris work under e10s. r=mayhemer 2017-04-12 11:43:50 -07:00
locales Bug 1288633 - Add more information when an URL matches Safe Browsing list. r=dragana,francois 2017-02-21 09:46:36 +08:00
mime Bug 1355933: P6. Hook up ADTS sniffer. r=kamidphish 2017-04-13 02:40:35 +02:00
protocol Bug 1074642 - When multiple HSTS headers are received, only consider the first. r=keeler,mcmanus 2017-04-20 10:03:53 -04:00
sctp Bug 1338086 - Remove useless else blocks in order to reduce complexity in netwerk/ r=dragana 2017-02-09 11:21:38 +01:00
socket Bug 1337791 - Part 1: JoinConnection() from psm. r=keeler 2017-04-03 17:23:09 -04:00
srtp
streamconv Bug 1348359 - Remove unused files from chrome://global/skin/dirListing/. r=florian 2017-04-21 16:14:49 +02:00
system Bug 1321841 - Better checksum for "live" adapters. r=bagder 2017-01-18 05:40:00 -05:00
test Bug 1074642 - When multiple HSTS headers are received, only consider the first. r=keeler,mcmanus 2017-04-20 10:03:53 -04:00
wifi Bug 1357323 - Remove the gonk code that was referenced by the build system. r=gps 2017-04-18 17:46:39 +09:00
moz.build Bug 1340030: Remove necko_standalone lib (netwerk/standalone/). r=mcmanus 2017-02-17 15:17:39 +13:00
necko-config.h.in