Invalidate existing HSTS headers

This commit is contained in:
Lukas Reschke 2013-02-14 19:23:29 +01:00
parent f4c9d4c067
commit be194c5b5b

View file

@ -231,6 +231,11 @@ class OC {
header("Location: $url");
exit();
}
} else {
// Invalidate HSTS headers
if (OC_Request::serverProtocol() === 'https') {
header('Strict-Transport-Security: max-age=0');
}
}
}