Preload HSTS (#2205)

ekzyis · web-flow · commit f3df1092d893 · 2025-06-03T20:47:25.000-05:00
diff --git a/middleware.js b/middleware.js
@@ -128,7 +128,7 @@ export function middleware (request) {
   // more useful headers
   resp.headers.set('X-Content-Type-Options', 'nosniff')
   resp.headers.set('Referrer-Policy', 'origin-when-cross-origin')
-  resp.headers.set('Strict-Transport-Security', 'max-age=31536000; includeSubDomains')
+  resp.headers.set('Strict-Transport-Security', 'max-age=31536000; includeSubDomains; preload')
 
   return resp
 }

Original file line number	Diff line number	Diff line change
`@@ -128,7 +128,7 @@ export function middleware (request) {`
`128`	`128`	`// more useful headers`
`129`	`129`	`resp.headers.set('X-Content-Type-Options', 'nosniff')`
`130`	`130`	`resp.headers.set('Referrer-Policy', 'origin-when-cross-origin')`
`131`		`- resp.headers.set('Strict-Transport-Security', 'max-age=31536000; includeSubDomains')`
	`131`	`+ resp.headers.set('Strict-Transport-Security', 'max-age=31536000; includeSubDomains; preload')`
`132`	`132`
`133`	`133`	`return resp`
`134`	`134`	`}`