AS1024
/
Kanboard-Prod
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Display HSTS headers only when HTTPS is used

This commit is contained in:
Frédéric Guillot 2014-02-21 19:45:55 -05:00
parent f51aae9b16
commit 94ce6f1364
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lib/response.php
View File

@ -125,7 +125,9 @@ class Response
public function hsts()
{
header('Strict-Transport-Security: max-age=31536000');
if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] != 'off') {
header('Strict-Transport-Security: max-age=31536000');
}
}
public function xframe($mode = 'DENY', array $urls = array())