Fix: Sites.domainImplies() should match subdomains.

1 files changed, 7 insertions, 6 deletions

diff --git a/src/common/Policy.js b/src/common/Policy.js
index 24c3179..dae369a 100644
--- a/src/common/Policy.js
+++ b/src/common/Policy.js
@@ -25,13 +25,14 @@ var {Permissions, Policy, Sites} = (() => {
     static originImplies(originKey, site) {
       return originKey === site || site.startsWith(`${originKey}/`);
     }
-    static domainImplies(domainKey, site, protocol = null) {
-      if (!protocol) {
-        return (Sites.isSecureDomainKey(domainKey)) 
-          ? Sites.domainImplies(Sites.toggleSecureDomainKey(domainKey, false), site, "https")
-          : ["http", "https"].some(protocol => Sites.domainImplies(domainKey, site, protocol));
+    
+    static domainImplies(domainKey, site, protocol ="https?") {
+      if (Sites.isSecureDomainKey(domainKey)) {
+        protocol = "https";
+        domainKey = Sites.toggleSecureDomainKey(domainKey, false);
       }
-      return Sites.originImplies(`${protocol}://${domainKey}`, site);
+      return new RegExp(`^${protocol}://([^/?#:]+\\.)?${domainKey.replace(/\./g, "\\.")}(?:[:/]|$)`)
+        .test(site);
     }
     
     static isImplied(site, byKey) {