Refactor old_relation_controller tests to use factories.

[rails.git] / config / initializers / secure_headers.rb

diff --git a/config/initializers/secure_headers.rb b/config/initializers/secure_headers.rb
index d1863fdd21e1090947cb88cc97790c9d285ced2a..e53ea6cef3d2e222a0d873e2cf2c4be0f53112ee 100644 (file)
--- a/config/initializers/secure_headers.rb
+++ b/config/initializers/secure_headers.rb
@@ -21,6 +21,7 @@ else
 end
 
 SecureHeaders::Configuration.default do |config|
 end
 
 SecureHeaders::Configuration.default do |config|

+  config.hsts = "max-age=0"

   config.csp = SecureHeaders::OPT_OUT
   config.csp_report_only = policy
 end
   config.csp = SecureHeaders::OPT_OUT
   config.csp_report_only = policy
 end