Closed madogiwa0124 closed 2 years ago
Thanks! Is there a reason we use the insecure.
version and not just https://...
?
@mikker
Thanks for comment!
Is there a reason we use the insecure. version
This is an insecure redirect destination, we added insecure.
for clarity.
not just https://...
This is because the original implementation was http, so I followed it.
I understand that this test verifies that redirects to another host are properly rejected.
As you said, even if don't add a subdomain, it will validate fine because it uses example.org
which is different from the default www.example.com
👍🏻
Would https://example.org/secret-alt
or something else be more obvious?
If so, I will try to fix it that way 😃
This is fine 👍 I was just curious if it was a conscious choice or not.
Thanks! 💙💚💛💜❤️
There was a part in the test code where the Example domains was not used, so it has been fixed.
How about PR?