unblocker/lib/hsts.js

Web proxy for evading internet censorship & general-purpose library for rewriting remote websites.

'use strict';

var debug = require('debug')('unblocker:hsts');

module.exports = function( /*config*/ ) {

    function hsts(data) {
        // this leaks to all sites that are visited by the client & it can block the client from accessing the proxy if https is not avaliable.
        if (data.headers['strict-transport-security']) {
            debug('deleting strict-transport-security header');
            delete data.headers['strict-transport-security'];
        }
    }

    return hsts;
};