Merge pull request #204 from mozilla/hsts

added HSTS header
2017-07-17 16:15:32 -07:00 · 2017-07-17 16:15:32 -07:00 · 9735aa62bd
commit 9735aa62bd
parent 4122f4dc3e 2127857790
1 changed files with 4 additions and 0 deletions
--- a/server/server.js
+++ b/server/server.js
@ -32,6 +32,10 @@ app.engine(
 app.set('view engine', 'handlebars');

 app.use(helmet());
+app.use(helmet.hsts({
+  maxAge: 31536000,
+  force: conf.env === 'production'
+}));
 app.use(
  helmet.contentSecurityPolicy({
    directives: {