From 36684dcf752c761f02bc85c6513db81e6482facd Mon Sep 17 00:00:00 2001 From: Jesse Norell Date: Wed, 10 Oct 2018 18:37:08 +0200 Subject: [PATCH] Mulitple HSTS headers are not allowed, should either unset before adding new, or set conditionally. --- install/tpl/apache_ispconfig.vhost.master | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/install/tpl/apache_ispconfig.vhost.master b/install/tpl/apache_ispconfig.vhost.master index 8eccbcba3..57c70885d 100644 --- a/install/tpl/apache_ispconfig.vhost.master +++ b/install/tpl/apache_ispconfig.vhost.master @@ -88,7 +88,7 @@ NameVirtualHost *: - Header always add Strict-Transport-Security "max-age=15768000" + Header setifempty add Strict-Transport-Security "max-age=15768000" RequestHeader unset Proxy early -- GitLab