BBlack has submitted this change and it was merged.

Change subject: annual - Raise HSTS max-age to 1 year and add "always"
......................................................................


annual - Raise HSTS max-age to 1 year and add "always"

I34d3b071 enabled HSTS with max-age=7 days. This patch also
adds the "always" flag.

Bug: T599
Bug: T40516
Change-Id: I33c370bc6a9b5572eeb69f6c106a63011e456f3b
---
M modules/annualreport/files/annual.wikimedia.org
1 file changed, 1 insertion(+), 1 deletion(-)

Approvals:
  BBlack: Verified; Looks good to me, approved



diff --git a/modules/annualreport/files/annual.wikimedia.org 
b/modules/annualreport/files/annual.wikimedia.org
index 19d030d..e3e5642 100644
--- a/modules/annualreport/files/annual.wikimedia.org
+++ b/modules/annualreport/files/annual.wikimedia.org
@@ -15,7 +15,7 @@
     RewriteCond %{HTTP:X-Forwarded-Proto} !https
     RewriteRule ^/(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} 
[R=301,E=ProtoRedirect]
     Header always merge Vary X-Forwarded-Proto
-    Header set Strict-Transport-Security "max-age=604800"
+    Header always set Strict-Transport-Security "max-age=31536000"
 
     <Directory />
         Order Deny,Allow

-- 
To view, visit https://gerrit.wikimedia.org/r/206984
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I33c370bc6a9b5572eeb69f6c106a63011e456f3b
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Chmarkine <[email protected]>
Gerrit-Reviewer: BBlack <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: JanZerebecki <[email protected]>
Gerrit-Reviewer: jenkins-bot <>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to