From 43e0c4ac897cb16e1f0faaa600f713d43445d3b0 Mon Sep 17 00:00:00 2001 From: Sam Gibson Date: Mon, 31 Aug 2015 13:47:35 +1200 Subject: [PATCH] Prevents unwrapping invalid location url domains --- components/net/http_loader.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/components/net/http_loader.rs b/components/net/http_loader.rs index 8f0700853fdd..cf5078a1a4f0 100644 --- a/components/net/http_loader.rs +++ b/components/net/http_loader.rs @@ -460,7 +460,7 @@ pub fn load(load_data: LoadData, loop { iters = iters + 1; - if &*url.scheme != "https" && request_must_be_secured(&url, &resource_mgr_chan) { + if &*url.scheme == "http" && request_must_be_secured(&url, &resource_mgr_chan) { info!("{} is in the strict transport security list, requesting secure host", url); url = secure_url(&url); }