upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-04-29 10:03:32 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 13

Merge pull request #1705 from owncloud/DisableHSTS

Browse source 
Invalidate existing HSTS headers
This commit is contained in:
Lukas Reschke 2013-02-14 11:33:26 -08:00
commit b6cbfc9cfe
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
lib/base.php
View file

@ -231,6 +231,11 @@ class OC {
header("Location: $url");
exit();
}
} else {
// Invalidate HSTS headers
if (OC_Request::serverProtocol() === 'https') {
header('Strict-Transport-Security: max-age=0');
}
}
}