From 8db541f37f5ca5cf6d99ad235990324ee26947e0 Mon Sep 17 00:00:00 2001 From: Julian Reinhardt Date: Fri, 5 Nov 2021 00:09:05 +0100 Subject: [PATCH 1/2] Removes HSTS from admin ui --- backend/app.js | 1 - 1 file changed, 1 deletion(-) diff --git a/backend/app.js b/backend/app.js index 8f4890c..89a8ed7 100644 --- a/backend/app.js +++ b/backend/app.js @@ -40,7 +40,6 @@ app.use(function (req, res, next) { } res.set({ - 'Strict-Transport-Security': 'includeSubDomains; max-age=631138519; preload', 'X-XSS-Protection': '1; mode=block', 'X-Content-Type-Options': 'nosniff', 'X-Frame-Options': x_frame_options, From f75b5b867b83450d8933b6414c407bedcefe4441 Mon Sep 17 00:00:00 2001 From: Julian Reinhardt Date: Fri, 5 Nov 2021 14:01:50 +0100 Subject: [PATCH 2/2] Fixes formatting --- backend/app.js | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/backend/app.js b/backend/app.js index 89a8ed7..ca6d6fb 100644 --- a/backend/app.js +++ b/backend/app.js @@ -40,12 +40,12 @@ app.use(function (req, res, next) { } res.set({ - 'X-XSS-Protection': '1; mode=block', - 'X-Content-Type-Options': 'nosniff', - 'X-Frame-Options': x_frame_options, - 'Cache-Control': 'no-cache, no-store, max-age=0, must-revalidate', - Pragma: 'no-cache', - Expires: 0 + 'X-XSS-Protection': '1; mode=block', + 'X-Content-Type-Options': 'nosniff', + 'X-Frame-Options': x_frame_options, + 'Cache-Control': 'no-cache, no-store, max-age=0, must-revalidate', + Pragma: 'no-cache', + Expires: 0 }); next(); });