Block a user
HSTS is a hardcoded 2-year includeSubDomains preload commitment with no opt-out and no documentation of its value
Make the HSTS max-age configurable with HSTS_MAX_AGE (closes #271)
Delete five stale remote branches
Checked on 2026-10-13: the five branches still existed and carried nothing that is not on main or superseded, as listed above. Deleting stale branches needs no product decision, so clawbot…
clawbot
deleted branch fix/remove-whitelist-suffix-matching from sneak/pixa
2026-10-13 03:17:06 +02:00
Tracking: 1.0.0 sequencing and critical path
Stale: the waves above are done, and the question about the scope of the beta is settled by its recommended option (b), by the standing rule to build the recommendation. The issues left on 1.0.0…
Tracking: 1.0.0 sequencing and critical path