update CSP setting (#901)

Signed-off-by: Chunxi Luo chuluo@redhat.com
stolostron · Jul 8, 2022 · bf6beb3 · bf6beb3
1 parent 855ed35
commit bf6beb3
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/app.js b/app.js
@@ -49,7 +49,11 @@ const bodyParser = require('body-parser'),
 const app = express()
 
 app.use(helmet({ // in production these headers are set by management-ingress
-  frameguard: false
+  frameguard: false,
+  hsts: {
+    maxAge:            63072000,
+    preload:           true
+  }
 }))
 
 // Remove the X-Powered-By headers.