-
Notifications
You must be signed in to change notification settings - Fork 975
Fixes #12223: Mitigate HSTS Fingerprinting #13649
Conversation
Codecov Report
@@ Coverage Diff @@
## master #13649 +/- ##
==========================================
- Coverage 56.67% 56.64% -0.04%
==========================================
Files 285 285
Lines 28881 28907 +26
Branches 4774 4777 +3
==========================================
+ Hits 16369 16375 +6
- Misses 12512 12532 +20
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
test plan works now!
@@ -823,9 +823,15 @@ module.exports.runPreMigrations = (data) => { | |||
} | |||
|
|||
if (data.lastAppVersion) { | |||
let runHSTSCleanup = false | |||
try { runHSTSCleanup = compareVersions(data.lastAppVersion, '0.22.00') < 1 } catch (e) {} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this needs to be changed if this PR is going out in 0.23.x instead of 0.22.x
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
update: since this is going out in 0.22.x release 2, this needs to be updated once we know the version number of 0.22.x release 1
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
update: looks like the final version to compare against is 0.22.13
Fixes: #12223
Test Plan:
githubusercontent
is loaded with a 301 redirectexample.com
Cached images and Files
safebrowsing-proxy.brave.com
and verify that the ninja image is loaded with a 301 redirect.Cached images and Files
githubusercontent
happens with a 307 redirect instead of 301.Alternative test plan if proxy site is not working
repeat steps above, but replace safebrowsing-proxy.com with https://jsfiddle.net/pqwdgr5x/5/