mirror of
https://github.com/taobataoma/meanTorrent.git
synced 2026-07-15 20:13:22 +02:00
Merge pull request #1309 from lirantal/bugfix/hsts-already-defined-by-helmet
fix(hsts): removing HSTS configuration set on lusca's csrf settings
This commit is contained in:
5
config/env/default.js
vendored
5
config/env/default.js
vendored
@@ -34,11 +34,6 @@ module.exports = {
|
||||
csp: { /* Content Security Policy object */},
|
||||
xframe: 'SAMEORIGIN',
|
||||
p3p: 'ABCDEF',
|
||||
hsts: {
|
||||
maxAge: 31536000, // Forces HTTPS for one year
|
||||
includeSubDomains: true,
|
||||
preload: true
|
||||
},
|
||||
xssProtection: true
|
||||
},
|
||||
logo: 'modules/core/client/img/brand/logo.png',
|
||||
|
||||
Reference in New Issue
Block a user