[Pkg-owncloud-commits] [owncloud] 347/394: Invalidate existing HSTS headers

[David Prévot]

This is an automated email from the git hooks/post-receive script.

taffit pushed a commit to annotated tag v4.5.10
in repository owncloud.

commit 0f7c6c00ce0c65b9429520e94e6857e4b74de52f
Author: Lukas Reschke <lukas at statuscode.ch>
Date:   Thu Feb 14 19:23:29 2013 +0100

    Invalidate existing HSTS headers
---
 lib/base.php |    5 +++++
 1 file changed, 5 insertions(+)

diff --git a/lib/base.php b/lib/base.php
index 8b5ceee..e5da51e 100644
--- a/lib/base.php
+++ b/lib/base.php
@@ -200,6 +200,11 @@ class OC{
 				header("Location: $url");
 				exit();
 			}
+		} else {
+			// Invalidate HSTS headers
+			if (OC_Request::serverProtocol() === 'https') {
+				header('Strict-Transport-Security: max-age=0');
+			}
 		}
 	}
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-owncloud/owncloud.git