fix: HSTS header max-age value (#3225)

3 years ago · e87d511978
1 changed files with 1 additions and 1 deletions
--- a/server/middlewares/security.js
+++ b/server/middlewares/security.js
@ -33,7 +33,7 @@ module.exports = function (req, res, next) {

  // -> Enforce HSTS
  if (WIKI.config.security.securityHSTS) {
-    res.set('Strict-Transport-Security', `max-age=${WIKI.config.securityHSTSDuration}; includeSubDomains`)
+    res.set('Strict-Transport-Security', `max-age=${WIKI.config.security.securityHSTSDuration}; includeSubDomains`)
  }

  // -> Prevent Open Redirect from user provided URL