add includeSubDomains; preload to Strict-Transport-Security header

This commit is contained in:
Uwe Steinmann 2021-03-10 11:58:54 +01:00
parent 5a212cc784
commit cc2b57e486

View File

@ -73,7 +73,7 @@ class SeedDMS_Bootstrap_Style extends SeedDMS_View_Common {
}
}
header('X-Content-Type-Options: nosniff');
header('Strict-Transport-Security: max-age=15768000');
header('Strict-Transport-Security: max-age=15768000; includeSubDomains; preload');
if($httpheader) {
foreach($httpheader as $name=>$value) {
header($name . ": " . $value);