--hsts should not use includeSubDomains

Fixes #1728
2026-07-28 08:45:22 +02:00 · 2015-12-23 11:33:39 -08:00
parent d4f63097d6
commit 8b50274d88
1 changed files with 1 additions and 1 deletions
@@ -33,7 +33,7 @@ REWRITE_HTTPS_ARGS_WITH_END = [
    https vhost"""

 HSTS_ARGS = ["always", "set", "Strict-Transport-Security",
-    "\"max-age=31536000; includeSubDomains\""]
+    "\"max-age=31536000\""]
 """Apache header arguments for HSTS"""

 UIR_ARGS = ["always", "set", "Content-Security-Policy",