Add HSTS related response header. (kyma-project#10063)

vandjelk · Mar 8, 2024 · 0c9e77d · 0c9e77d
1 parent c786038
commit 0c9e77d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/cmd/dashboard-token-proxy/main.go b/cmd/dashboard-token-proxy/main.go
@@ -113,6 +113,7 @@ func HandleTokenRequest(clientID, clientSecret, ghURL, authorizationURL string)
 
 		w.Header().Add("content-type", "application/json")
 		w.Header().Add("Access-Control-Allow-Origin", fmt.Sprintf("https://pages.%s", ghURL))
+		w.Header().Add("Strict-Transport-Security", "max-age=63072000; includeSubDomains; preload")
 		w.Write(b)
 	}
 }