romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-25 14:53:34 +03:00
Code Issues Projects Releases Packages Wiki Activity

hsts: skip expired HSTS entries read from file

Browse source 
Extend test 780 to verify

Closes #21186
This commit is contained in:
Daniel Stenberg 2026-04-01 08:51:25 +02:00
parent 8e8bdd3604
commit 4478a10f0d
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
2 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
lib/hsts.c
View file

@ -408,6 +408,7 @@ static CURLcode hsts_add(struct hsts *h, const char *line)
time_t expires = 0;
const char *hp = curlx_str(&host);
size_t hlen;
time_t now = time(NULL);
/* The date parser works on a null-terminated string. The maximum length
is upheld by curlx_str_quotedword(). */
@ -419,6 +420,10 @@ static CURLcode hsts_add(struct hsts *h, const char *line)
else
Curl_getdate_capped(dbuf, &expires);
if(expires <= now)
/* this entry already expired */
return CURLE_OK;
if(hp[0] == '.') {
curlx_str_nudge(&host, 1);
hp = curlx_str(&host);