feat(security): #314 include hsts

2024-12-12 21:50:32 +01:00
parent 1ad694ce2b
commit f0ec293be8
1 changed files with 1 additions and 0 deletions
--- a/handler/middleware/security_headers.go
+++ b/handler/middleware/security_headers.go
@@ -34,6 +34,7 @@ func SecurityHeaders(serverSettings *types.Settings) func(http.Handler) http.Han
 			w.Header().Set("Permissions-Policy", "geolocation=(), camera=(), microphone=()")
 			w.Header().Set("Referrer-Policy", "strict-origin-when-cross-origin")
 			w.Header().Set("Permissions-Policy", "interest-cohort=()")
+			w.Header().Set("Strict-Transport-Security", "max-age=63072000; includeSubDomains; preload")

 			if r.Method == "OPTIONS" {
 				w.WriteHeader(http.StatusOK)