Add HSTS preload value

18F · Oct 13, 2016 · edcc5c9 · edcc5c9
1 parent 59a40a9
commit edcc5c9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/config/initializers/secure_headers.rb b/config/initializers/secure_headers.rb
@@ -1,5 +1,5 @@
 SecureHeaders::Configuration.default do |config|
-  config.hsts = "max-age=#{365.days.to_i}; includeSubDomains"
+  config.hsts = "max-age=#{365.days.to_i}; includeSubDomains; preload"
   config.x_frame_options = 'SAMEORIGIN'
   config.x_content_type_options = 'nosniff'
   config.x_xss_protection = '1; mode=block'