search

andrewlock / NetEscapades.AspNetCore.SecurityHeaders

Small package to allow adding security headers to ASP.NET Core websites
MIT License
701 stars 73 forks source link

Adjust documentation #208

Closed daze99 closed 1 month ago

daze99 commented 1 month ago

In your examples you state that AddDefaultSecurityHeaders and AddDefaultApiSecurityHeaders add the Strict-Transport-Security: max-age=31536000; includeSubDomains header. According to your code they only call AddStrictTransportSecurityMaxAge and not AddStrictTransportSecurityMaxAgeIncludeSubDomains.

andrewlock commented 1 month ago

Thanks, I've just pushed an update that fixes the docs 👍