Set hsts preload to true and increase maxAge to 365 days (#713)

DFE-Digital · Jul 3, 2024 · 870488f · 870488f
1 parent 7ed3c2e
commit 870488f
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/Dfe.ManageFreeSchoolProjects/Dfe.ManageFreeSchoolProjects/Startup.cs b/Dfe.ManageFreeSchoolProjects/Dfe.ManageFreeSchoolProjects/Startup.cs
@@ -116,6 +116,12 @@ public void ConfigureServices(IServiceCollection services)
         });
         services.AddHttpContextAccessor();
 
+        services.AddHsts(options => {
+            options.Preload = true;
+            options.IncludeSubDomains = true;
+            options.MaxAge = TimeSpan.FromDays(365);
+        });
+
         services.AddAuthorization(options => { options.DefaultPolicy = SetupAuthorizationPolicyBuilder().Build(); });
 
         services.AddMicrosoftIdentityWebAppAuthentication(Configuration);