fix: update helmet config

2025-07-26 13:48:33 +02:00 · 2020-09-18 11:30:30 +02:00 · 2020-09-18 11:30:30 +02:00 · 6f41332055
commit 6f41332055
parent ed71ad423b
1 changed files with 5 additions and 0 deletions
--- a/lib/middleware/helmet.js
+++ b/lib/middleware/helmet.js
@ -3,6 +3,11 @@ const helmet = require('helmet');
 module.exports = function(config) {
    if (config.enableHelmet) {
        return helmet({
+            hsts: {
+                maxAge: 63072000,
+                includeSubDomains: true,
+                preload: true,
+            },
            contentSecurityPolicy: {
                directives: {
                    defaultSrc: [