add HSTS header

abraham · Jan 19, 2015 · 864082d · 864082d
1 parent eee2ed6
commit 864082d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/http.php b/http.php
@@ -5,6 +5,9 @@
 $expectedHost = getenv('HOST');
 
 if (!DEBUG) {
+    if (FORCE_TLS) {
+        header("Strict-Transport-Security: max-age=31415926; includeSubDomains; preload");
+    }
     if (
         FORCE_TLS &&
         isset($_SERVER['HTTP_X_FORWARDED_PROTO']) &&