fix: HSTS preload header

Kukei-eu · Jul 2, 2024 · 1b8a525 · 1b8a525
1 parent e62908e
commit 1b8a525
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/server/index.js b/server/index.js
@@ -12,7 +12,12 @@ import { postFeedbackEnhanceController } from './controllers/api/feedback/enhanc
 
 const main = async () => {
 	const app = express();
-	app.use(helmet());
+	app.use(helmet({
+		strictTransportSecurity: {
+			maxAge: 63072000,
+			preload: true,
+		},
+	}));
 	app.disable('x-powered-by');
 	app.use((req, res, next) => {
 		console.log(`Request: ${req.get('cf-connecting-ip')}, ${req.originalUrl}`);