Allow apache to control the HSTS setting

openstreetmap · Jan 11, 2018 · d987416 · d987416
1 parent b396c8c
commit d987416
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/config/initializers/secure_headers.rb b/config/initializers/secure_headers.rb
@@ -27,6 +27,7 @@
 }
 
 SecureHeaders::Configuration.default do |config|
+  config.hsts = SecureHeaders::OPT_OUT
   config.csp = SecureHeaders::OPT_OUT
   config.csp_report_only = csp_policy
   config.cookies = cookie_policy