Allow option to disable sending HSTS headers even if https:// is used in url
This commit is contained in:
syuilo 2018-10-17 04:15:41 +09:00
parent c51eb48e11
commit 2a1b2012d7
2 changed files with 2 additions and 1 deletions

View file

@ -23,6 +23,7 @@ export type Source = {
url: string; url: string;
port: number; port: number;
https?: { [x: string]: string }; https?: { [x: string]: string };
disableHsts?: boolean;
mongodb: { mongodb: {
host: string; host: string;
port: number; port: number;

View file

@ -41,7 +41,7 @@ app.use(compress({
// HSTS // HSTS
// 6months (15552000sec) // 6months (15552000sec)
if (config.url.startsWith('https')) { if (config.url.startsWith('https') && !config.disableHsts) {
app.use(async (ctx, next) => { app.use(async (ctx, next) => {
ctx.set('strict-transport-security', 'max-age=15552000; preload'); ctx.set('strict-transport-security', 'max-age=15552000; preload');
await next(); await next();