libre-service.eu/pad.libre-service.eu-etherpad
libre-service.eu/pad.libre-service.eu-etherpad
1
0
Fork 0
mirror of https://github.com/ether/etherpad-lite.git synced 2025-02-01 03:12:42 +01:00
Code Issues Projects Releases Wiki Activity

Merge pull request #1619 from ether/stricter-transport

Browse source 
Enable HSTS on TLS connections
This commit is contained in:
John McLear 2014-06-17 12:58:47 +01:00
commit c627608ea5
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/node/hooks/express.js
View file

@ -71,6 +71,11 @@ exports.restartServer = function () {
} }
app.use(function (req, res, next) { app.use(function (req, res, next) {
// res.header("X-Frame-Options", "deny"); // breaks embedded pads
if(settings.ssl){ // if we use SSL
res.header("Strict-Transport-Security", "max-age=31536000; includeSubDomains");
}
res.header("Server", serverName); res.header("Server", serverName);
next(); next();
}); });