From e87d5119789686ed2ace11385ac79dc33a4e8fa5 Mon Sep 17 00:00:00 2001 From: pylr Date: Fri, 19 Mar 2021 02:53:55 +0100 Subject: [PATCH] fix: HSTS header max-age value (#3225) --- server/middlewares/security.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/middlewares/security.js b/server/middlewares/security.js index 7b5fb40a..4f2e4e8f 100644 --- a/server/middlewares/security.js +++ b/server/middlewares/security.js @@ -33,7 +33,7 @@ module.exports = function (req, res, next) { // -> Enforce HSTS if (WIKI.config.security.securityHSTS) { - res.set('Strict-Transport-Security', `max-age=${WIKI.config.securityHSTSDuration}; includeSubDomains`) + res.set('Strict-Transport-Security', `max-age=${WIKI.config.security.securityHSTSDuration}; includeSubDomains`) } // -> Prevent Open Redirect from user provided URL