Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Domain substitution should ignore HSTS preload list #23

Closed
alexhaydock opened this issue Jun 14, 2016 · 1 comment
Closed

Domain substitution should ignore HSTS preload list #23

alexhaydock opened this issue Jun 14, 2016 · 1 comment
Milestone

Comments

@alexhaydock
Copy link

I know this feature is a work in progress, and you may have thought of this already, but the domain substitution scripts currently do not make any exception for the HSTS preload list, which contains entries for basically all of the URLs the script wants to replace. Some form of exception could be added to avoid compromising user security by stripping the sites of their HSTS preload status in the final build.

And thanks for your work on this great project!

@Eloston
Copy link
Member

Eloston commented Jun 14, 2016

I did not know about this. Thanks for letting me know.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants