forked from colin/resume
2
0
Fork 0

temporarily disable HSTS to resolve certificate provisioning issues

This commit is contained in:
Leopere 2025-04-15 16:33:47 -04:00
parent 0b693d7d2b
commit cd94db9c03
2 changed files with 2 additions and 2 deletions

View File

@ -10,7 +10,7 @@
-X-Powered-By
# HSTS
Strict-Transport-Security "max-age=31536000; includeSubDomains"
# Strict-Transport-Security "max-age=31536000; includeSubDomains"
# Basic security headers
X-Frame-Options "DENY"

View File

@ -32,7 +32,7 @@ app.use((req, res, next) => {
res.setHeader('X-XSS-Protection', '1; mode=block');
res.setHeader('Referrer-Policy', 'strict-origin-when-cross-origin');
res.setHeader('Permissions-Policy', 'geolocation=(), microphone=(), camera=()');
res.setHeader('Strict-Transport-Security', 'max-age=31536000; includeSubDomains');
// res.setHeader('Strict-Transport-Security', 'max-age=31536000; includeSubDomains');
next();
});