diff --git a/lib/init.php b/lib/init.php index 4b333157..1026d1ed 100644 --- a/lib/init.php +++ b/lib/init.php @@ -41,7 +41,7 @@ header("X-Frame-Options: DENY"); // If Froxlor was called via HTTPS -> enforce it for the next time if (isset($_SERVER['HTTPS']) && (strtolower($_SERVER['HTTPS']) != 'off')) { - header("Strict-Transport-Security: max-age=500"); + header("Strict-Transport-Security: max-age=15768000"); } // Internet Explorer shall not guess the Content-Type, see: