From 3b55f4799defad3d42734beaeceba76b9e398dd9 Mon Sep 17 00:00:00 2001 From: labkey-jeckels Date: Fri, 20 Dec 2024 17:10:12 -0800 Subject: [PATCH] Improve comment --- api/src/org/labkey/api/security/AuthFilter.java | 1 + 1 file changed, 1 insertion(+) diff --git a/api/src/org/labkey/api/security/AuthFilter.java b/api/src/org/labkey/api/security/AuthFilter.java index 5806cf168d3..d1e23cbc97f 100644 --- a/api/src/org/labkey/api/security/AuthFilter.java +++ b/api/src/org/labkey/api/security/AuthFilter.java @@ -168,6 +168,7 @@ public void doFilter(ServletRequest request, ServletResponse response, FilterCha else if (!AppProps.getInstance().isDevMode()) { // Issue 51904: Strict-Transport-Security header when HTTPS is required + // Avoid setting when in dev mode to make it easier to toggle HTTPS on and off again for local deployments resp.setHeader("Strict-Transport-Security", "max-age=31536000"); } }