mirror of
https://iceshrimp.dev/limepotato/jormungandr-bite.git
synced 2024-11-24 02:47:35 -07:00
Resolve #2923
Allow option to disable sending HSTS headers even if https:// is used in url
This commit is contained in:
parent
c51eb48e11
commit
2a1b2012d7
2 changed files with 2 additions and 1 deletions
|
@ -23,6 +23,7 @@ export type Source = {
|
|||
url: string;
|
||||
port: number;
|
||||
https?: { [x: string]: string };
|
||||
disableHsts?: boolean;
|
||||
mongodb: {
|
||||
host: string;
|
||||
port: number;
|
||||
|
|
|
@ -41,7 +41,7 @@ app.use(compress({
|
|||
|
||||
// HSTS
|
||||
// 6months (15552000sec)
|
||||
if (config.url.startsWith('https')) {
|
||||
if (config.url.startsWith('https') && !config.disableHsts) {
|
||||
app.use(async (ctx, next) => {
|
||||
ctx.set('strict-transport-security', 'max-age=15552000; preload');
|
||||
await next();
|
||||
|
|
Loading…
Reference in a new issue