mark
/
msos
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: force HTTPS + HSTS #12

Merged
popovskik merged 1 commits from kristijan-dev into develop 2026-08-04 08:39:59 +00:00
Conversation 0 Commits 1 Files Changed 1 +12
popovskik commented 2026-08-04 08:37:40 +00:00
Collaborator
Copy Link

Forces http->https and adds HSTS (6-month). Closes the HTTPS-everywhere gap.

🤖 Generated with Claude Code

Forces http->https and adds HSTS (6-month). Closes the HTTPS-everywhere gap. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
popovskik added 1 commit 2026-08-04 08:37:41 +00:00
0c07b05b1f security(.htaccess): force HTTPS + add HSTS 
- Redirect all plain-http requests to https (double condition guards against
  a redirect loop behind a TLS-terminating proxy).
- Add Strict-Transport-Security (6-month max-age, no preload/includeSubDomains
  so it stays easy to adjust) so browsers refuse http after the first visit.

Closes the "HTTPS everywhere" gap: previously http:// served in the clear.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
popovskik merged commit 15624454e8 into develop 2026-08-04 08:39:59 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No Label
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: mark/msos#12
No description provided.
Delete Branch "kristijan-dev"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?