Nick Harper

Clarify how to format a datetime-local value

1

#### Summary #### Motivation The existing language suggests that one can take a `Date` object, call `toISOString()` on it, and use the resulting string as the value for a datetime-local...

/api/v2/update consistently times out

8

This happens both on the production site and when running locally (e.g. via `make serve`). For the local reproduction, the reproduction steps are: 1. Run `make serve` 2. Load `http://localhost:8080/api/v2/update`....

Consider raising maxRedirects to 20 to match Chrome's behavior

9

https://cs.chromium.org/chromium/src/net/url_request/url_request.h?sq=package:chromium&dr=C&g=0&l=137 sets the redirect limit in chrome, based on the Fetch spec.

Prevent preloading a domain if its TLD is preloaded

2

There are a few .app domains on the preload list, but the entire app TLD is preloaded. We should reject these submissions because they're already covered by the TLD entry.

Fix tests that rely on behavior of external domains

4

Some of the test cases in redirects_test.go and domain_test.go rely on the behavior of external domains. For some of these tests, that behavior has changed and the tests are no...

Logging in with the username "test" results in an error

1

Today, when trying to log in with a username of "test", I got the error "The `allowCredentials` attribute exceeds the maximum allowed size (64)". This error comes from Chrome's implementation...

Disable another test

4

I missed this in PRs #131 and #135.

Use "cloud.google.com/go/logging" where possible, and remove most instances of printing to os.Stdout or os.Stderr, replacing them with calls to logging functions.

There are two locations that handle a `StatusPendingRemoval` but do not handle `StatusPendingAutomatedRemoval`: The `Submit` endpoint checks that a domain meets the preload requirements, and if it does, updates its...

The cloud console (e.g. https://console.cloud.google.com/cloudscheduler?project=hstspreload) only shows the status of the last run of the cron job. If it fails, we should get notified somehow of the failure so that...