brave-core/test/data/iframe_hsts.html at master - brave-core - Gitea: Git with a cup of tea

Discharge7443/brave-core

Files

T

Pranjal Jumde f83d9393b3 Issue 3419: Disallow 3rd parties from setting HSTS.

HSTS supercookies are a known fingerprinting vector. This change disallow's
third parties from setting security headers:

1. "Strict-Transport-Security"
2. "Expect-CT"
3. "Public-Key-Pins"
4. "Public-Key-Pins-Report-Only"

that can be used for fingerprinting.

auditors: @diracdeltas, @bbondy, @iefremov

2019-02-27 22:12:18 -08:00

2 lines

13 B

HTML

Raw Permalink Blame History

Hello World!