Merge pull request #12505 from nextcloud/fix/warning-hsts-debugging

chore: Add header check instructions to HSTS warning section
This commit is contained in:
Daniel
2025-01-13 12:36:57 +01:00
committed by GitHub

View File

@@ -77,6 +77,9 @@ For enhanced security we recommend enabling HSTS as described in our security ti
The HSTS header needs to be configured within your Web server by following the
:ref:`enable-hsts-label` documentation
You can see if the header is appearing in requests by using your browser inspector
or using a tool such as cURL: ``curl --head https://cloud.domain.tld``.
/dev/urandom is not readable by PHP
-----------------------------------