Merge pull request #1433 from hackmdio/feature/disable-include-subdomain-hsts

Disable HSTS IncludeSubdomain, to prevent unexpected behavior
This commit is contained in:
Max Wu 2020-03-02 18:29:03 +08:00 committed by GitHub
commit d658903d01
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions

View File

@ -14,7 +14,7 @@ module.exports = {
hsts: { hsts: {
enable: true, enable: true,
maxAgeSeconds: 60 * 60 * 24 * 365, maxAgeSeconds: 60 * 60 * 24 * 365,
includeSubdomains: true, includeSubdomains: false,
preload: true preload: true
}, },
csp: { csp: {