sso icon indicating copy to clipboard operation
sso copied to clipboard

Published 20 hours ago • verified publisher icon buzzfeed

sso-auth: HSTS header set without using HTTPS

Open loganmeetsworld opened this issue 6 years ago • 0 comments

In auth/middleware.go, we appear to set an HSTS header regardless of whether or not we're serving over HTTPS.

loganmeetsworld avatar Aug 22 '18 13:08 loganmeetsworld