chore: Add header check instructions to HSTS warning section

Closes #10234

Signed-off-by: Josh <josh.t.richards@gmail.com>
This commit is contained in:
Josh
2025-01-11 15:58:43 -05:00
committed by GitHub
parent 600f3ad0e6
commit a6c16db6b1

View File

@@ -77,6 +77,9 @@ For enhanced security we recommend enabling HSTS as described in our security ti
The HSTS header needs to be configured within your Web server by following the
:ref:`enable-hsts-label` documentation
You can see if the header is appearing in requests by using your browser inspector
or using a tool such as cURL: ``curl --head https://cloud.domain.tld``.
/dev/urandom is not readable by PHP
-----------------------------------