git-market/curl-curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-04-11 12:01:42 +08:00
Code Issues Actions 14 Packages Projects Releases Wiki Activity

hsts: skip expired HSTS entries read from file

Browse Source 
Extend test 780 to verify

Closes #21186
This commit is contained in:
Daniel Stenberg 2026-04-01 08:51:25 +02:00
parent 8e8bdd3604
commit 4478a10f0d
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
lib/hsts.c
View File

@ -408,6 +408,7 @@ static CURLcode hsts_add(struct hsts *h, const char *line)
time_t expires = 0;
const char *hp = curlx_str(&host);
size_t hlen;
time_t now = time(NULL);
/* The date parser works on a null-terminated string. The maximum length
is upheld by curlx_str_quotedword(). */
@ -419,6 +420,10 @@ static CURLcode hsts_add(struct hsts *h, const char *line)
else
Curl_getdate_capped(dbuf, &expires);
if(expires <= now)
/* this entry already expired */
return CURLE_OK;
if(hp[0] == '.') {
curlx_str_nudge(&host, 1);
hp = curlx_str(&host);

1
tests/data/test780
View File

@ -48,6 +48,7 @@ CURL_TIME=1728465947
<file name="%LOGDIR/input%TESTNUMBER">
this.hsts.example "99991001 04:47:41"
expired.example "20011001 04:47:41"
</file>
<name>