Hi,
I check the page in the tool https://securityheaders.com I think it's ok :) but I'm missing:
strict-transport-security max-age=31536000
options:
includeSubDomains and preload
How can I add it?
Thank you for your help
#39263 strict-transport-security
Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Environment Information
Joomla! version
4.33
PHP version
8.0
Admin Tools version
8.0
Latest post by Grzesiek388 on Thursday, 27 July 2023 04:54 CDT
Thursday, 27 July 2023 04:20 CDT
Grzesiek388
Thursday, 27 July 2023 04:49 CDT
nicholas
Akeeba Staff
Manager
Disable the Use HSTS option.
In the custom code to add at the bottom of the file add:
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
Alternatively, wait for Admin Tools 7.4.0 which will have a new option for HSTS called "For HSTS Preload". This will add the includeSubDomains and preload flags to the HSTS header. This will be released most likely next week.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Thursday, 27 July 2023 04:54 CDT
Grzesiek388
ok thank you i will wait :)