From dab830553b08be05b124fffd1ef332c798f98ecf Mon Sep 17 00:00:00 2001 From: Daniel Marquard Date: Fri, 15 Jul 2016 03:07:16 -0400 Subject: [PATCH] Inclusion requests are rejected with trailing semicolons --- h5bp/directive-only/ssl.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/h5bp/directive-only/ssl.conf b/h5bp/directive-only/ssl.conf index f0545da..9719c2e 100644 --- a/h5bp/directive-only/ssl.conf +++ b/h5bp/directive-only/ssl.conf @@ -37,7 +37,7 @@ keepalive_timeout 300s; # up from 75 secs default #add_header Strict-Transport-Security "max-age=31536000; includeSubDomains;"; # This version tells browsers to treat all subdomains the same as this site and to load exclusively over HTTPS # Recommend is also to use preload service -#add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload;"; +#add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"; # This default SSL certificate will be served whenever the client lacks support for SNI (Server Name Indication). # Make it a symlink to the most important certificate you have, so that users of IE 8 and below on WinXP can see your main site without SSL errors.