From 4495de28db1ddf918260683ab576107dcd3e0ca3 Mon Sep 17 00:00:00 2001
From: Benno van den Berg <bennovandenberg@gmail.com>
Date: Wed, 26 Sep 2012 15:11:46 +0200
Subject: [PATCH] Use req.secure if it is set

---
 lib/middleware/hsts.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/middleware/hsts.js b/lib/middleware/hsts.js
index 4bcb1a98..ea889b01 100644
--- a/lib/middleware/hsts.js
+++ b/lib/middleware/hsts.js
@@ -12,7 +12,7 @@ module.exports = function (maxAge, includeSubdomains) {
     if (includeSubdomains) header += '; includeSubdomains';
     
     return function (req, res, next)  {
-        if (req.connection.encrypted) {
+        if (typeof req.secure !== "undefined" ? req.secure : req.connection.encrypted) {
             res.header('Strict-Transport-Security', header);
         }
         next();