exclude preload from hsts header

This commit is contained in:
Timothy Lin 2022-02-13 23:28:02 +08:00
parent fc03004fb6
commit 5553b0dc5a

View File

@ -43,7 +43,7 @@ const securityHeaders = [
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
{
key: 'Strict-Transport-Security',
value: 'max-age=31536000; includeSubDomains; preload',
value: 'max-age=31536000; includeSubDomains',
},
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy
{