Fix typo in SSL configuration. Per https://developer.mozilla.org/en-U…

…S/docs/Web/Security/HTTP_strict_transport_security#Enabling_Strict_Transport_Security
NuGet · May 19, 2015 · 5b6fcbf · 5b6fcbf
1 parent da2fd0a
commit 5b6fcbf
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/src/NuGetGallery/Web.config b/src/NuGetGallery/Web.config
@@ -241,7 +241,7 @@
                 <add name="X-Frame-Options" value="deny" />
                 <add name="X-XSS-Protection" value="1; mode=block" />
                 <add name="X-Content-Type-Options" value="nosniff" />
-                <add name="Strict-Transport-Security" value="maxage=31536000; includeSubDomains" />
+                <add name="Strict-Transport-Security" value="max-age=31536000; includeSubDomains" />
             </customHeaders>
         </httpProtocol>
         <handlers>

diff --git a/tests/NuGetGallery.FunctionalTests/WebUITests/BasicPages/SecurityHeaderTest.cs b/tests/NuGetGallery.FunctionalTests/WebUITests/BasicPages/SecurityHeaderTest.cs
@@ -26,7 +26,7 @@ public override IEnumerator<WebTestRequest> GetRequestEnumerator()
  @"X-Frame-Options: deny
 X-XSS-Protection: 1; mode=block
 X-Content-Type-Options: nosniff
-Strict-Transport-Security: maxage=31536000; includeSubDomains");               
+Strict-Transport-Security: max-age=31536000; includeSubDomains");               
              homePageRequest.ValidateResponse += new EventHandler<ValidationEventArgs>(homePageTextValidationRule.Validate);         
              yield return homePageRequest;
              homePageRequest = null;
@@ -38,7 +38,7 @@ public override IEnumerator<WebTestRequest> GetRequestEnumerator()
  @"X-Frame-Options: deny
 X-XSS-Protection: 1; mode=block
 X-Content-Type-Options: nosniff
-Strict-Transport-Security: maxage=31536000; includeSubDomains");    
+Strict-Transport-Security: max-age=31536000; includeSubDomains");    
             packagesPageRequest.ValidateResponse += new EventHandler<ValidationEventArgs>(packagesPageTextValidationRule.Validate);
             yield return packagesPageRequest;
             packagesPageRequest = null;