Merge pull request #922 from 18F/tspencer/hsts

added HSTS headers
18F · Nov 7, 2019 · 8c2cdf0 · 8c2cdf0
2 parents 23a0dae + 279d659
commit 8c2cdf0
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/tock/tock/settings/base.py b/tock/tock/settings/base.py
@@ -127,3 +127,8 @@
 AUTO_LOGOUT_DELAY_MINUTES = 60
 
 TOCK_CHANGE_REQUEST_FORM = 'https://docs.google.com/a/gsa.gov/forms/d/1EpVTxXgRNgYfoSA2J8Oi-csjhFKqFm5DT542vIlahpU/viewform?edit_requested=true'
+
+# enable HSTS according to https://cyber.dhs.gov/bod/18-01/
+SECURE_HSTS_SECONDS = 31536000
+SECURE_HSTS_INCLUDE_SUBDOMAINS = True
+SECURE_HSTS_PRELOAD = True