From ee35a5b7c3167334c3fa8b6f8bea3f3eb5785774 Mon Sep 17 00:00:00 2001 From: Damien Duportal Date: Tue, 19 Nov 2019 18:22:04 +0100 Subject: [PATCH] Enforce HSTS with netlify toml config --- netlify.toml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/netlify.toml b/netlify.toml index 330706385..d5e939fc0 100644 --- a/netlify.toml +++ b/netlify.toml @@ -5,3 +5,9 @@ base = "docs" # Path relative to the "base" directory command = "sh -x scripts/netlify-run.sh" + +[[headers]] + # Define which paths this specific [[headers]] block will cover. + for = "/*" + [headers.values] + Strict-Transport-Security = "max-age=31536000; includeSubDomains; preload"