• Jeffrey I. Schiller's avatar
    Only send Strict Transport Security Header using https · 7cde9da3
    Jeffrey I. Schiller authored
    If AppInventorFeatures.enableHttpRedirect() is false, don't send the
    Strict-Transport-Security header. Chrome appears to ignore it when it
    is sent over http instead of https, but I wouldn't want to depend on
    that behavior!
    
    Change-Id: I585fc6164a57d7502b737c4596cbd42b84489dd2
    7cde9da3
index.jsp 3.8 KB