blob: 7a64ad18074b19cd3c3cf859f5df86e0a0f87d87 [file] [log] [blame]
<style>
#hsts-view-tab-content tt {
word-wrap: break-word;
}
</style>
<!-- HSTS tab -->
<div id=hsts-view-tab-content class=content-box>
<div class=deindent-header>
HSTS is HTTPS Strict Transport Security: a way for sites to elect to
always use HTTPS. See <a href="http://dev.chromium.org/sts" target=_blank>
http://dev.chromium.org/sts</a>.</div>
<!-- This UI allows a user to query and update the browser's list of
HSTS domains. -->
<h4>Add domain</h4>
<p>Input a domain name to add it to the HSTS set:</p>
<form id=hsts-view-add-form>
Domain: <input type=text id=hsts-view-add-input type="url"
placeholder="example.com"><br>
<label>Include subdomains for STS: <input type="checkbox" id=hsts-view-check-sts-input></label><br>
<label>Include subdomains for PKP: <input type="checkbox" id=hsts-view-check-pkp-input></label><br>
<label>Public key fingerprints: <input type=text id=hsts-view-add-pins style="width: 25em; max-width: 100%;"></label><br>
<p style="font-size: small; color: #767676; font-style: italic; margin-left: 2em; max-width: 40em; max-width: 100%;">(public key fingerprints are comma separated and consist of the hash function followed by a foreslash and the base64 encoded fingerprint, for example <tt>sha1/Guzek9lMwR3KeIS8wwS9gBvVtIg=</tt>)</p>
<input type=submit value="Add" id=hsts-view-add-submit>
</form>
<h4>Delete domain</h4>
<p>
Input a domain name to delete it from the HSTS set
(<i>you cannot delete preloaded entries</i>):
</p>
<form id=hsts-view-delete-form>
Domain: <input type=text id=hsts-view-delete-input type="url"
placeholder="example.com">
<input type=submit value="Delete" id=hsts-view-delete-submit>
</form>
<h4>Query domain</h4>
<p>Input a domain name to query the current HSTS set:</p>
<form id=hsts-view-query-form>
Domain: <input type=text id=hsts-view-query-input type="url"
placeholder="example.com">
<input type=submit value="Query" id=hsts-view-query-submit>
</form>
<div style="margin-top: 1em; margin-left: 2em;" id=hsts-view-query-output></div>
</div>