brave-core/test/data/iframe_hsts.html at a2771982cb9c19f8f7f63ebc42c5dca94b0636c2 - brave-core - Gitea: Git with a cup of tea

Discharge7443/brave-core

Files

T

Pranjal Jumde f83d9393b3 Issue 3419: Disallow 3rd parties from setting HSTS.

HSTS supercookies are a known fingerprinting vector. This change disallow's
third parties from setting security headers:

1. "Strict-Transport-Security"
2. "Expect-CT"
3. "Public-Key-Pins"
4. "Public-Key-Pins-Report-Only"

that can be used for fingerprinting.

auditors: @diracdeltas, @bbondy, @iefremov

2019-02-27 22:12:18 -08:00

2 lines

13 B

HTML

Raw Blame History

Hello World!