fix: improve HSTS settings

Signed-off-by: Ryan Cao <70191398+ryanccn@users.noreply.github.com>
ryanccn · Jan 25, 2024 · 59030b9 · 59030b9
1 parent d358386
commit 59030b9
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/next.config.js b/next.config.js
@@ -21,12 +21,12 @@ const csp = `
 
 const securityHeaders = [
   {
-    key: "X-DNS-Prefetch-Control",
-    value: "on",
+    key: "Strict-Transport-Security",
+    value: "max-age=63072000; includeSubDomains; preload",
   },
   {
-    key: "Strict-Transport-Security",
-    value: "max-age=63072000",
+    key: "X-DNS-Prefetch-Control",
+    value: "off",
   },
   {
     key: "X-XSS-Protection",