From 568427ca98f22e2c89178d4a9d85b31bc93d5c86 Mon Sep 17 00:00:00 2001
From: Pavel Djundik <xPaw@users.noreply.github.com>
Date: Wed, 19 Feb 2020 13:26:43 +0200
Subject: [PATCH] Disable changing TLS if STS is enforced

---
 client/components/NetworkForm.vue | 10 +++++++++-
 src/models/network.js             |  6 +++++-
 2 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/client/components/NetworkForm.vue b/client/components/NetworkForm.vue
index 2c893314..1f295e0c 100644
--- a/client/components/NetworkForm.vue
+++ b/client/components/NetworkForm.vue
@@ -65,10 +65,18 @@
 								type="checkbox"
 								name="tls"
 								:checked="defaults.tls ? true : false"
-								:disabled="config.lockNetwork ? true : false"
+								:disabled="
+									config.lockNetwork || defaults.hasSTSPolicy ? true : false
+								"
 								@change="onSecureChanged"
 							/>
 							Use secure connection (TLS)
+							<span
+								v-if="defaults.hasSTSPolicy"
+								class="tooltipped tooltipped-n tooltipped-no-delay"
+								aria-label="This network has a strict transport security policy, you will be unable to disable TLS"
+								>🔒 STS</span
+							>
 						</label>
 						<label class="tls">
 							<input
diff --git a/src/models/network.js b/src/models/network.js
index c6004090..918133f0 100644
--- a/src/models/network.js
+++ b/src/models/network.js
@@ -396,7 +396,11 @@ Network.prototype.exportForEdit = function() {
 		fieldsToReturn = ["name", "nick", "username", "password", "realname"];
 	}
 
-	return _.pick(this, fieldsToReturn);
+	const data = _.pick(this, fieldsToReturn);
+
+	data.hasSTSPolicy = !!STSPolicies.get(this.host);
+
+	return data;
 };
 
 Network.prototype.export = function() {