aboutsummaryrefslogtreecommitdiffstats
path: root/config/haproxy-devel/haproxy.inc
diff options
context:
space:
mode:
authorErmal Luçi <eri@pfsense.org>2014-02-18 08:53:57 +0100
committerErmal Luçi <eri@pfsense.org>2014-02-18 08:53:57 +0100
commit51889bc74c3735422163eac27e630a8e5ee7164b (patch)
treec790ec00522988ca5ffbd54dd11ad82d2249d7ba /config/haproxy-devel/haproxy.inc
parent2c3d0d5ae18c82daf20043a2b89035eeb633e20b (diff)
parentfdc63dbf757a94105ff1bf9d295fcc4047f34ea4 (diff)
downloadpfsense-packages-51889bc74c3735422163eac27e630a8e5ee7164b.tar.gz
pfsense-packages-51889bc74c3735422163eac27e630a8e5ee7164b.tar.bz2
pfsense-packages-51889bc74c3735422163eac27e630a8e5ee7164b.zip
Merge pull request #591 from PiBa-NL/hap_strict_security
haproxy-devel, option for "HTTP Strict Transport Security" HTST
Diffstat (limited to 'config/haproxy-devel/haproxy.inc')
-rw-r--r--config/haproxy-devel/haproxy.inc4
1 files changed, 4 insertions, 0 deletions
diff --git a/config/haproxy-devel/haproxy.inc b/config/haproxy-devel/haproxy.inc
index 7f65e814..4713a2d1 100644
--- a/config/haproxy-devel/haproxy.inc
+++ b/config/haproxy-devel/haproxy.inc
@@ -560,6 +560,10 @@ function write_backend($fd, $name, $pool, $frontend) {
if ($optioncheck)
fwrite ($fd, "\toption\t\t\t{$optioncheck}\n");
+ if ($pool["strict_transport_security"] && is_numeric($pool["strict_transport_security"])){
+ fwrite ($fd, "\trspadd Strict-Transport-Security:\ max-age={$pool["strict_transport_security"]};\n");
+ }
+
if ($pool['advanced_backend']) {
$adv_be = explode("\n", base64_decode($pool['advanced_backend']));
foreach($adv_be as $adv_line) {