Skip to content

hsts: on load, only remove exact duplicates - #22869

Closed
bagder wants to merge 2 commits into
masterfrom
bagder/hsts-child
Closed

bagder wants to merge 2 commits into
masterfrom
bagder/hsts-child

Conversation

@bagder

@bagder bagder commented Sep 8, 2026

Copy link
Copy Markdown
Member

Added test3109: verify HSTS when parent+subdomain expires before child

Reported-by: Stanislav Fort

Added test3109: verify HSTS when parent+subdomain expires before child

Reported-by: Stanislav Fort
@github-actions github-actions Bot added the tests label Sep 8, 2026
@bagder
bagder requested a balanced review from Copilot September 8, 2026 07:19
@bagder
bagder marked this pull request as ready for review September 8, 2026 07:19

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The functional change is focused and covered by a regression test; only a minor comment typo remains.

Pull request overview

Fixes HSTS cache loading so parent-domain policies do not suppress child entries.

Changes:

  • Limits duplicate detection to exact hostnames.
  • Adds and registers a regression test.
File summaries
File Description
lib/hsts.c Uses exact matching during HSTS loading.
tests/data/test3109 Tests preserving a longer-lived child entry.
tests/data/Makefile.am Registers the regression test.
Review details
  • Files reviewed: 3/3 changed files
  • Comments generated: 1
  • Review effort level: Balanced

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread tests/data/test3109 Outdated
language

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Development

Successfully merging this pull request may close these issues.

2 participants