Add HSTS header. (#784)

jsdelivr · Oct 28, 2016 · 254fc9d · 254fc9d
1 parent 5d81cdb
commit 254fc9d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/app.js b/app.js
@@ -75,6 +75,7 @@ app.use(function (req, res, next) {
     res.setHeader('Cache-Control', 'public, max-age=' + oneHourToSec);
     res.setHeader('Expires', new Date(Date.now() + oneHourToMilliSec).toUTCString());
     res.setHeader('Last-Modified', new Date().toUTCString());
+    res.setHeader('Strict-Transport-Security', 'max-age=16070400; includeSubDomains; preload');
     res.setHeader('Accept-Ranges', 'bytes');
     res.setHeader('X-Content-Type-Options', 'nosniff');
     res.setHeader('X-Frame-Options', 'DENY');