4 commits

Author	SHA1	Message	Date
Moonchild	50ad087351	Issue #1721 - Implement GlobalPrivacyControl ... (and get rid of failed DoNotTrack)	2023-10-18 10:17:23 +08:00
Moonchild	c95a802078	Issue #2070 - When multiple HSTS headers are received, only consider the first. ... This implements a plain interpretations of RFC 6797, which says to only consider the first HSTS header. This slightly conflicts with RFC 7230, which says that sending multiple headers which can't be merged is illegal (except for a specific whitelist which HSTS isn't in), so this situation should never occur in the first place (and would therefore not need the explicit entry in RFC 6797). It improves HSTS robustness dealing with non-compliant servers. Resolves #2070	2022-12-30 09:21:48 +08:00
Job Bautista	faa778ec9d	Issue #1975 - Implement Origin header CSRF mitigation. ... Backported from Mozilla bug 446344.	2022-07-30 08:43:44 +08:00
Roy Tam	dcd9973243	import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo	2018-01-19 03:59:58 +08:00