exclude preload from hsts header

timlrx · timlrx · commit 5553b0dc5afe · 2022-02-13T23:28:02.000+08:00
diff --git a/next.config.js b/next.config.js
@@ -43,7 +43,7 @@ const securityHeaders = [
   // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
   {
     key: 'Strict-Transport-Security',
-    value: 'max-age=31536000; includeSubDomains; preload',
+    value: 'max-age=31536000; includeSubDomains',
   },
   // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy
   {

Original file line number	Diff line number	Diff line change
`@@ -43,7 +43,7 @@ const securityHeaders = [`
`43`	`43`	`// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security`
`44`	`44`	`{`
`45`	`45`	`key: 'Strict-Transport-Security',`
`46`		`- value: 'max-age=31536000; includeSubDomains; preload',`
	`46`	`+ value: 'max-age=31536000; includeSubDomains',`
`47`	`47`	`},`
`48`	`48`	`// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy`
`49`	`49`	`{`