SOLR-15578 Add Support for HSTS Security Protocol
Change-Id: I5c87491bd875351e46774dc4ff5652deda6808c3
https://issues.apache.org/jira/browse/SOLR-15578
Description
Adding support for HSTS Security Protocol in jetty.xml.
Solution
I edited the jetty.xml to enable the HSTS protocol. This makes it so it is enabled by default with a max-age of 31536000.
Tests
I complemented the test SecurityHeadersTest with the HSTS header. This test right now awaits fixing because of the issue described in SOLR-14903, but I added this header for the record.
Checklist
Please review the following and check all that apply:
- [x] I have reviewed the guidelines for How to Contribute and my code conforms to the standards described there to the best of my ability.
- [x] I have created a Jira issue and added the issue ID to my pull request title.
- [x] I have given Solr maintainers access to contribute to my PR branch. (optional but recommended)
- [x] I have developed this patch against the
mainbranch. - [x] I have run
./gradlew check. - [x] I have added tests for my changes.
- [ ] I have added documentation for the Reference Guide
Should we be committing this PR before SOLR-14903 is fixed?
@bszabo97 Can you modify this PR to make it opt-in, and without includeSubDomains? Also add some documentation in ref guide about its existence and how to enable it.
Closing due to lack of interest