mirror of
https://github.com/certbot/certbot.git
synced 2026-08-01 02:44:21 +02:00
Merge pull request #2004 from letsencrypt/no-hsts-subdomains
--hsts should not use includeSubDomains
This commit is contained in:
@@ -33,7 +33,7 @@ REWRITE_HTTPS_ARGS_WITH_END = [
|
|||||||
https vhost"""
|
https vhost"""
|
||||||
|
|
||||||
HSTS_ARGS = ["always", "set", "Strict-Transport-Security",
|
HSTS_ARGS = ["always", "set", "Strict-Transport-Security",
|
||||||
"\"max-age=31536000; includeSubDomains\""]
|
"\"max-age=31536000\""]
|
||||||
"""Apache header arguments for HSTS"""
|
"""Apache header arguments for HSTS"""
|
||||||
|
|
||||||
UIR_ARGS = ["always", "set", "Content-Security-Policy",
|
UIR_ARGS = ["always", "set", "Content-Security-Policy",
|
||||||
|
|||||||
Reference in New Issue
Block a user