diff options
| author | Gaming4JC <g4jc@bulletmail.org> | 2018-05-26 15:00:01 -0400 |
|---|---|---|
| committer | Gaming4JC <g4jc@bulletmail.org> | 2018-05-26 15:42:45 -0400 |
| commit | bd851735628cd6b07285e87fa60081e9d11a3b7e (patch) | |
| tree | c4a2831c9188f2d68e57c3b379bf86e7ff54cf93 /modules/libpref/init/all.js | |
| parent | 8f354e52d09d1bf2fadfbbfc141d4f32241599a4 (diff) | |
| download | UXP-bd851735628cd6b07285e87fa60081e9d11a3b7e.tar UXP-bd851735628cd6b07285e87fa60081e9d11a3b7e.tar.gz UXP-bd851735628cd6b07285e87fa60081e9d11a3b7e.tar.lz UXP-bd851735628cd6b07285e87fa60081e9d11a3b7e.tar.xz UXP-bd851735628cd6b07285e87fa60081e9d11a3b7e.zip | |
Remove support and tests for HSTS priming from the tree. Fixes #384
Diffstat (limited to 'modules/libpref/init/all.js')
| -rw-r--r-- | modules/libpref/init/all.js | 17 |
1 files changed, 0 insertions, 17 deletions
diff --git a/modules/libpref/init/all.js b/modules/libpref/init/all.js index 18e23ff2e..1706807e9 100644 --- a/modules/libpref/init/all.js +++ b/modules/libpref/init/all.js @@ -5447,23 +5447,6 @@ pref("media.block-autoplay-until-in-foreground", false); pref("layout.css.servo.enabled", true); #endif -// HSTS Priming -// If a request is mixed-content, send an HSTS priming request to attempt to -// see if it is available over HTTPS. -#ifdef RELEASE_OR_BETA -// Don't change the order of evaluation of mixed-content and HSTS upgrades in -// order to be most compatible with current standards -pref("security.mixed_content.send_hsts_priming", false); -pref("security.mixed_content.use_hsts", false); -#else -// Change the order of evaluation so HSTS upgrades happen before -// mixed-content blocking -pref("security.mixed_content.send_hsts_priming", true); -pref("security.mixed_content.use_hsts", true); -#endif -// Approximately 1 week default cache for HSTS priming failures -pref ("security.mixed_content.hsts_priming_cache_timeout", 10080); - // TODO: Bug 1380959: Block toplevel data: URI navigations // If true, all toplevel data: URI navigations will be blocked. // Please note that manually entering a data: URI in the |