13 Commits

Author	SHA1	Message	Date
NTD	b3a189d2de	Follow up to 7bd7e8a - *aState needs both STATE_IS_SECURE and STATE_SECURE_HIGH on re-eval of mixed content	2018-07-25 06:52:56 +08:00
Pale Moon	3ca7947b8a	Reset mixed-mode page status to secure if no actual load has occurred through the mixed content blocker. ... This should take care of injection of non-network URIs that aren't same origin (e.g. extension-sourced data: URIs) triggering mixed-mode warnings. Assumption here is that data: URIs are safe if "local"; this is a security trade-off that should be acceptable.	2018-07-25 06:52:49 +08:00
Pale Moon	3398a810ae	Update HSTS preload list. ... Tag #62.	2018-07-25 06:51:16 +08:00
trav90	17da3b2364	Update HSTS Preload list	2018-07-25 06:42:57 +08:00
Pale Moon	9739829d2d	Don't write HSTS site state to file if HSTS has been user-disabled. ... This also adds a missing pref observer. Follow-up to 9bc65e235b62c4e84c69f301bd89de29769f4abf.	2018-07-25 06:36:48 +08:00
Pale Moon	8bd908fa4b	Reinstate network.stricttransportsecurity.enabled HSTS switch. ... Defaults to enabled (HSTS on) but can be flipped to disable the use of the HSTS mechanism, trading security for privacy. This resolves #830.	2018-07-25 06:36:25 +08:00
trav90	e035fc775e	Update HSTS preload list	2018-07-25 06:22:07 +08:00
trav90	1ab1dc37b6	Update HSTS preload list	2018-07-25 01:30:01 +08:00
Pale Moon	4b96ad2190	HSTS preload list update. ... Tag #62.	2018-07-25 01:18:04 +08:00
Pale Moon	b142256756	Update list of known CA root hashes	2018-07-25 01:05:11 +08:00
trav90	afa5e10326	Update HSTS Preload List	2018-07-24 23:39:44 +08:00
wolfbeast	5ee6187aad	Prep tree for forward-porting Goanna, stage 1	2018-07-24 23:10:50 +08:00
Moonchild	baf46a6bf1	Merge pull request #1 from mozilla/esr38: Esr38 upstream pull	2018-07-24 23:04:07 +08:00