exclude preload from hsts header

This commit is contained in:
Timothy Lin 2022-02-13 23:28:02 +08:00
parent fc03004fb6
commit 5553b0dc5a

View File

@ -43,7 +43,7 @@ const securityHeaders = [
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
{ {
key: 'Strict-Transport-Security', key: 'Strict-Transport-Security',
value: 'max-age=31536000; includeSubDomains; preload', value: 'max-age=31536000; includeSubDomains',
}, },
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy
{ {