feat(hsts): trun includeSubdomain to false

BREAKING CHANGE: change default setting from `true` to `false` Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-03-02 11:51:04 +08:00 · 2020-03-02 11:51:04 +08:00 · 40b6b06f57
parent 66ec25dddb
commit 40b6b06f57
1 changed files with 1 additions and 1 deletions
--- a/lib/config/default.js
+++ b/lib/config/default.js
@ -14,7 +14,7 @@ module.exports = {
  hsts: {
    enable: true,
    maxAgeSeconds: 60 * 60 * 24 * 365,
-    includeSubdomains: true,
+    includeSubdomains: false,
    preload: true
  },
  csp: {