UniqAI/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui synced 2024-11-06 08:56:39 +00:00
Code Issues Actions 5 Packages Projects Releases Wiki Activity

Prevent crash while setting Strict-Transport-Security security header

Browse Source
This commit is contained in:
Diwakar 2024-10-26 13:45:28 +07:00 committed by GitHub
parent d905bda000
commit 0a7bc50279
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
backend/open_webui/utils/security_headers.py
View File

@ -60,7 +60,7 @@ def set_hsts(value: str):
pattern = r"^max-age=(\d+)(;includeSubDomains)?(;preload)?$" pattern = r"^max-age=(\d+)(;includeSubDomains)?(;preload)?$"
match = re.match(pattern, value, re.IGNORECASE) match = re.match(pattern, value, re.IGNORECASE)
if not match: if not match:
return "max-age=31536000;includeSubDomains" value = "max-age=31536000;includeSubDomains"
return {"Strict-Transport-Security": value} return {"Strict-Transport-Security": value}