hsts: enable by default

No longer considered experimental.

Closes #6700
This commit is contained in:
Daniel Stenberg 2021-03-08 08:30:32 +01:00
parent eff614fb02
commit d71ff2b9db
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
15 changed files with 69 additions and 44 deletions

View file

@ -3618,7 +3618,7 @@ CURLcode Curl_http_header(struct Curl_easy *data, struct connectdata *conn,
}
}
#ifdef USE_HSTS
#ifndef CURL_DISABLE_HSTS
/* If enabled, the header is incoming and this is over HTTPS */
else if(data->hsts && checkprefix("Strict-Transport-Security:", headp) &&
(conn->handler->flags & PROTOPT_SSL)) {