gnu-social

History

Mikael Nordfeldth 871912a00a Plugins didn't match lib/plugin.php onPluginVersion function definition I ran: for i in `grep -R onPluginVersion...version plugins/\|cut -d: -f1`; do sed -i '{ s/$onPluginVersion($$\&\$versions$/\1array \2/ }' $i; done		2015-06-06 22:04:01 +02:00
..
locale	Snapshot of the Transifex translation project - February 2015	2015-03-08 09:34:38 +01:00
README	add StrictTransportSecurity plugin	2010-10-26 23:46:18 -04:00
StrictTransportSecurityPlugin.php	Plugins didn't match lib/plugin.php onPluginVersion function definition	2015-06-06 22:04:01 +02:00

README

The Strict Transport Security plugin implements the Strict Transport Security header, improving the security of HTTPS only sites.
See http://lists.w3.org/Archives/Public/www-archive/2009Sep/att-0051/draft-hodges-strict-transport-sec-05.plain.html for the specification.

Installation
============
add "addPlugin('strictTransportSecurity');"
to the bottom of your config.php

The plugin will not do anything unless:
$config['site']['ssl'] is set to 'always'
$config['site']['path'] is either not set, empty, or '/'

Settings
========
max_age (15552000): sets how long to remember the forced HTTPS (seconds) (15552000 seconds is 180 days)
includeSubDomains (false): if set, then STS will apply to all the sub-domains too.

Example
=======
addPlugin('strictTransportSecurity');