Merge pull request #3288 from jdno/hsts-preload

rbtcollins · web-flow · commit ef329e1c62fe · 2023-03-27T19:50:52.000+02:00
Add preload directive to HSTS header
diff --git a/www/website_config.json b/www/website_config.json
@@ -1,6 +1,6 @@
 {
     "headers": {
-        "Strict-Transport-Security": "max-age=63072000; includeSubDomains",
+        "Strict-Transport-Security": "max-age=63072000; includeSubDomains; preload",
         "X-Content-Type-Options": "nosniff",
         "X-Frame-Options": "DENY",
         "X-XSS-Protection": "1; mode=block",

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"headers": {`
`3`		`- "Strict-Transport-Security": "max-age=63072000; includeSubDomains",`
	`3`	`+ "Strict-Transport-Security": "max-age=63072000; includeSubDomains; preload",`
`4`	`4`	`"X-Content-Type-Options": "nosniff",`
`5`	`5`	`"X-Frame-Options": "DENY",`
`6`	`6`	`"X-XSS-Protection": "1; mode=block",`