diff options
author | redmatrix <git@macgirvin.com> | 2016-02-04 20:38:22 -0800 |
---|---|---|
committer | redmatrix <git@macgirvin.com> | 2016-02-04 20:38:22 -0800 |
commit | 425089524373137e11d3691e7efdce0fb89281c8 (patch) | |
tree | 5a59032b3c28f13268075d937d10973288905be9 /boot.php | |
parent | bfeb89075f5e9d3a966c35fd1d0ec56e637a1522 (diff) | |
download | volse-hubzilla-425089524373137e11d3691e7efdce0fb89281c8.tar.gz volse-hubzilla-425089524373137e11d3691e7efdce0fb89281c8.tar.bz2 volse-hubzilla-425089524373137e11d3691e7efdce0fb89281c8.zip |
make strict transport security header optional
Diffstat (limited to 'boot.php')
-rwxr-xr-x | boot.php | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -2164,7 +2164,7 @@ function construct_page(&$a) { // security headers - see https://securityheaders.io - if($a->get_scheme() === 'https') + if($a->get_scheme() === 'https' && $a->config['system']['transport_security_header']) header("Strict-Transport-Security: max-age=31536000"); header("Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'"); |