Merge pull request #389 from timlrx/hsts

timlrx · web-flow · commit 72ca0868e146 · 2022-02-13T23:32:27.000+08:00
exclude preload from hsts header
diff --git a/next.config.js b/next.config.js
@@ -43,7 +43,7 @@ const securityHeaders = [
   // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
   {
     key: 'Strict-Transport-Security',
-    value: 'max-age=31536000; includeSubDomains; preload',
+    value: 'max-age=31536000; includeSubDomains',
   },
   // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy
   {

Original file line number	Diff line number	Diff line change
`@@ -43,7 +43,7 @@ const securityHeaders = [`
`43`	`43`	`// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security`
`44`	`44`	`{`
`45`	`45`	`key: 'Strict-Transport-Security',`
`46`		`- value: 'max-age=31536000; includeSubDomains; preload',`
	`46`	`+ value: 'max-age=31536000; includeSubDomains',`
`47`	`47`	`},`
`48`	`48`	`// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy`
`49`	`49`	`{`