projects / curl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 19ff32b) | patch
[PATCH] hsts: improve subdomain handling
authorDaniel Stenberg <daniel@haxx.se>
Wed, 9 Oct 2024 08:04:35 +0000 (10:04 +0200)
committerSamuel Henrique <samueloph@debian.org>
Fri, 8 May 2026 14:16:21 +0000 (07:16 -0700)
commite4dcbbb3f2aa7f728db8f0bef9933d8bd2b957fe
treee533d03a49a11039af8fd7b0dac4bfde4becec07tree | snapshot
parent19ff32bb16c8888ab82cec9d3cca8554c74aa170commit | diff
[PATCH] hsts: improve subdomain handling

- on load, only replace existing HSTS entries if there is a full host
  match

- on matching, prefer a full host match and secondary the longest tail
  subdomain match

Closes #15210

Backported by: Aquila Macedo Costa <aquilamacedo@riseup.net>.

Changes:
- Refresh patch context.

Gbp-Pq: Name CVE-2024-9681-0.patch
lib/hsts.c diff | blob | history
tests/data/test1660 diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.