fix strict-transport-security header value (#8)

Alvearie · Apr 13, 2021 · 3444bc1 · 3444bc1
1 parent f075123
commit 3444bc1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...-base-os/src/main/java/com/ibm/watson/common/service/base/security/MainServletFilter.java b/...-base-os/src/main/java/com/ibm/watson/common/service/base/security/MainServletFilter.java
@@ -87,7 +87,7 @@ public class MainServletFilter implements Filter {
 	// Cross site support header names
 	public static final String HEADER_ACCESS_CONTROL_ORIGIN = "Access-Control-Allow-Origin";
 	public static final String HEADER_STRICT_TRANSPORT_SECURITY = "strict-transport-security";
-	public static final String STRICT_TRANSPORT_SETTING = "31536000; includeSubDomains";
+	public static final String STRICT_TRANSPORT_SETTING = "max-age=31536000; includeSubDomains";
 	public static final String HEADER_CACHE_CONTROL = "cache-control";
 	public static final String CACHE_CONTROL_SETTING = "no-store";
 	public static final String HEADER_PRAGMA = "pragma";