UniqAI/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui synced 2024-11-25 13:29:53 +00:00
Code Issues Actions 12 Packages Projects Releases Wiki Activity

Merge pull request #6432 from diwakar-s-maurya/main

Browse Source 
fix: Prevent crash while setting Strict-Transport-Security security header
This commit is contained in:
Timothy Jaeryang Baek 2024-10-26 00:23:15 -07:00 committed by GitHub
commit 554e181ccb
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
backend/open_webui/utils/security_headers.py
View File

@ -60,7 +60,7 @@ def set_hsts(value: str):
pattern = r"^max-age=(\d+)(;includeSubDomains)?(;preload)?$" pattern = r"^max-age=(\d+)(;includeSubDomains)?(;preload)?$"
match = re.match(pattern, value, re.IGNORECASE) match = re.match(pattern, value, re.IGNORECASE)
if not match: if not match:
return "max-age=31536000;includeSubDomains" value = "max-age=31536000;includeSubDomains"
return {"Strict-Transport-Security": value} return {"Strict-Transport-Security": value}