[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #21705 [Metrics/Onionoo]: Invalid Strict-Transport-Security header

#21705: Invalid Strict-Transport-Security header
---------------------------------+--------------------------
     Reporter:  cypherpunks      |      Owner:  metrics-team
         Type:  defect           |     Status:  new
     Priority:  Medium           |  Milestone:
    Component:  Metrics/Onionoo  |    Version:
     Severity:  Normal           |   Keywords:
Actual Points:                   |  Parent ID:
       Points:                   |   Reviewer:
      Sponsor:                   |
---------------------------------+--------------------------
 Onionoo sets an invalid strict transport security header, namely `Strict-
 Transport-Security:""max-age=15768000""` (notice the double double
 quotes). This leads to Tor Browser giving the following error in the
 console.
 {{{
 Strict-Transport-Security: The site specified a header that could not be
 parsed successfully.
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21705>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs