HTTP Strict Transport Security

2024-05-23 14:29:55 +02:00
parent 0d2e58361b
commit d52180dcf1
1 changed files with 10 additions and 0 deletions
--- a/crates/common/src/config/jmap/settings.rs
+++ b/crates/common/src/config/jmap/settings.rs
@@ -137,6 +137,16 @@ impl JmapConfig {
            ));
        }

+        // Add HTTP Strict Transport Security
+        if config.property::<bool>("server.http.hsts").unwrap_or(false) {
+            http_headers.push((
+                hyper::header::STRICT_TRANSPORT_SECURITY,
+                hyper::header::HeaderValue::from_static(
+                    "max-age=31536000; includeSubDomains; preload",
+                ),
+            ));
+        }
+
        let mut jmap = JmapConfig {
            default_language: Language::from_iso_639(
                config