Updated STS handling to require an explicit port in insecure-connection capability upgrades, ignoring incomplete policies without upgrading.

This commit is contained in:
2026-02-04 10:19:26 -07:00
parent 3290f15439
commit 89a8f3eb0a

View File

@@ -552,17 +552,9 @@ sts_handle_capability (struct server *serv, const char *value)
if (!serv->use_ssl) if (!serv->use_ssl)
{ {
if (!has_port) if (!has_port)
{
if (serv->port > 0)
{
port = (guint16) serv->port;
has_port = TRUE;
}
else
{ {
return FALSE; return FALSE;
} }
}
#ifdef USE_OPENSSL #ifdef USE_OPENSSL
if (serv->sts_upgrade_in_progress) if (serv->sts_upgrade_in_progress)
{ {