Add HSTS to the control panel headers (#879)

4e3cfead · Michael Kroes · Joshua Tauberer · 8844a918 · 4e3cfead
Commit 4e3cfead authored Jul 29, 2016 by Michael Kroes Committed by Joshua Tauberer Jul 29, 2016
Show whitespace changes
Inline Side-by-side

Showing with 1 addition and 0 deletions

nginx-primaryonly.conf conf/nginx-primaryonly.conf +1 -0

No files found.
--- a/conf/nginx-primaryonly.conf
+++ b/conf/nginx-primaryonly.conf
@@ -9,6 +9,7 @@
 		add_header X-Frame-Options "DENY";
 		add_header X-Content-Type-Options nosniff;
 		add_header Content-Security-Policy "frame-ancestors 'none';";
+		add_header Strict-Transport-Security max-age=31536000;
 	}

 	# ownCloud configuration.