author Sid Stamm <>
Wed, 06 Oct 2010 10:07:39 -0700
changeset 61189 57db6ae6d83266e95f8d462520e0bc7d7868a9fc
child 95411 e6da6ece3818eed14dd357220970bfc1d3bfe6e7
permissions -rw-r--r--
bug 557598 - Support strict-transport-security (STS) in private browsing mode; r=ehsan,dveditz a=blocking-betaN+

<!-- ***** BEGIN LICENSE BLOCK *****
   - Version: MPL 1.1/GPL 2.0/LGPL 2.1
   - The contents of this file are subject to the Mozilla Public License Version
   - 1.1 (the "License"); you may not use this file except in compliance with
   - the License. You may obtain a copy of the License at
   - Software distributed under the License is distributed on an "AS IS" basis,
   - WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
   - for the specific language governing rights and limitations under the
   - License.
   - The Original Code is Strict-Transport-Security.
   - The Initial Developer of the Original Code is
   - Mozilla Foundation.
   - Portions created by the Initial Developer are Copyright (C) 2010
   - the Initial Developer. All Rights Reserved.
   - Contributor(s):
   -  Sid Stamm <>
   - Alternatively, the contents of this file may be used under the terms of
   - either the GNU General Public License Version 2 or later (the "GPL"), or
   - the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
   - in which case the provisions of the GPL or the LGPL are applicable instead
   - of those above. If you wish to allow use of your version of this file only
   - under the terms of either the GPL or the LGPL, and not to allow others to
   - use your version of this file under the terms of the MPL, indicate your
   - decision by deleting the provisions above and replace them with the notice
   - and other provisions required by the LGPL or the GPL. If you do not delete
   - the provisions above, a recipient may use your version of this file under
   - the terms of any one of the MPL, the GPL or the LGPL.
   - ***** END LICENSE BLOCK ***** -->

    <title>STS test iframe</title>
      var self = window;
      window.addEventListener("load", function() {
          self.parent.postMessage("BOOTSTRAP plain", "http://mochi.test:8888");
        }, false);
    <!-- This frame should be loaded over HTTPS to set the STS header. -->
    This frame was loaded using 
    and set the STS header to force this site and allow subdomain upgrading.