Do not include subtomains in STS header.

8a0bfa49 · Marin Jankovski · b512fbc0 · 8a0bfa49
Commit 8a0bfa49 authored Jan 03, 2014 by Marin Jankovski
Show whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

app/controllers/application_controller.rb app/controllers/application_controller.rb +1 -1

No files found.
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -162,7 +162,7 @@ class ApplicationController < ActionController::Base
    headers['X-XSS-Protection'] = '1; mode=block'
    headers['X-UA-Compatible'] = 'IE=edge'
    headers['X-Content-Type-Options'] = 'nosniff'
-    headers['Strict-Transport-Security'] = 'max-age=31536000; includeSubDomains' if Gitlab.config.gitlab.https
+    headers['Strict-Transport-Security'] = 'max-age=31536000' if Gitlab.config.gitlab.https
  end

  def add_gon_variables