Mastodon
/
forget-cancellare-vecchi-toot
mirror of https://github.com/codl/forget
2
0
Fork 0
Code Issues Releases Wiki Activity

fix hsts header

This commit is contained in:
codl 2017-08-28 01:52:22 +02:00
parent 16f6739189
commit af407ff1f2
No known key found for this signature in database
GPG Key ID: 6CD7C8891ED1233A
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app.py
View File

@ -85,7 +85,7 @@ def install_security_headers(resp):
resp.headers.set('Content-Security-Policy', csp)
if app.config.get('HTTPS'):
resp.headers.set('strict-transport-security', 'max-age: {}'.format(60*60*24*365))
resp.headers.set('strict-transport-security', 'max-age={}'.format(60*60*24*365))
resp.headers.set('referrer-policy', 'no-referrer')
resp.headers.set('x-content-type-options', 'nosniff')