Azure / Azure/static-web-apps

Increase max-age for Strict-Transport-Security header

Open
#559 2 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
No language data
Stars
346
Forks
67
PR merge metrics
No merged PRs in 30d

Description

Currently the header is:
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload

But to be able to add it to the preload list, in addition to having specified preload it also has to have a max-age of minimum 31536000.

The preload list submission page recommends setting max-age to 2 years, 63072000

_Error: Max-age too low
The max-age must be at least 31536000 seconds (≈ 1 year), but the header currently only has max-age=10886400._

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.