Middleware will now only include the headers that the user explicitly…

… sets in the consuming application's config file
GaProgMan · Aug 15, 2017 · 09d4d52 · 09d4d52
1 parent 139a80a
commit 09d4d52
Showing 1 changed file with 8 additions and 8 deletions.
diff --git a/src/Models/SecureHeadersMiddlewareConfiguration.cs b/src/Models/SecureHeadersMiddlewareConfiguration.cs
@@ -79,14 +79,14 @@ public class SecureHeadersMiddlewareConfiguration : ISecureHeadersMiddlewareConf
 
         public SecureHeadersMiddlewareConfiguration()
         {
-            UseHsts = true;
-            UseHpkp = true;
-            UseXFrameOptions = true;
-            UseXssProtection = true;
-            UseXContentTypeOptions = true;
-            UseContentSecurityPolicy = true;
-            UsePermittedCrossDomainPolicy = true;
-            UseReferrerPolicy = true;
+            UseHsts = false;
+            UseHpkp = false;
+            UseXFrameOptions = false;
+            UseXssProtection = false;
+            UseXContentTypeOptions = false;
+            UseContentSecurityPolicy = false;
+            UsePermittedCrossDomainPolicy = false;
+            UseReferrerPolicy = false;
 
             HstsConfiguration = new HstsConfiguration();
             HpkpConfiguration = new HPKPConfiguration();