Push a temporary HSTS hack because for netlify broken root-level domains

Signed-off-by: Ari Archer <ari.web.xyz@gmail.com>
TruncatedDinoSour · Sep 25, 2022 · 3cdd7cc · 3cdd7cc
1 parent 8277f7c
commit 3cdd7cc
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/netlify.toml b/netlify.toml
@@ -192,3 +192,10 @@
         X-Permitted-Cross-Domain-Policies = "none"
         Referrer-Policy = "no-referrer"
 
+[[headers]]
+    for = "https://ari-web.xyz"
+
+    [headers.values]
+        Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload"
+        Content-Security-Policy = "upgrade-insecure-requests"
+        Referrer-Policy = "no-referrer"