mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Remove preload token from HSTS header

Browse Source 
Please see the documentation on how to include your domain in the
preload lists:

https://hstspreload.appspot.com
This commit is contained in:
Jose Luis Duran 2016-01-06 00:57:04 -02:00
parent b7eb0ead89
commit 657cb0dbf6
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/etc/inc/system.inc
View File

@ -1273,7 +1273,7 @@ EOD;
$nginx_config .= "\t\tssl_protocols TLSv1 TLSv1.1 TLSv1.2;\n";
$nginx_config .= "\t\tssl_ciphers \"EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH\";\n";
$nginx_config .= "\t\tssl_prefer_server_ciphers on;\n";
$nginx_config .= "\t\tadd_header Strict-Transport-Security \"max-age=31536000; preload\";\n";
$nginx_config .= "\t\tadd_header Strict-Transport-Security \"max-age=31536000\";\n";
$nginx_config .= "\t\tadd_header X-Content-Type-Options nosniff;\n";
$nginx_config .= "\t\tssl_session_tickets off;\n";
$nginx_config .= "\t\tssl_stapling on;\n";