io.werval.filters

Annotation Type HSTS

@FilterWith(value=HSTS.Filter.class)
 @Target(value={METHOD,TYPE})
 @Retention(value=RUNTIME)
 @Inherited
 @Documented
public @interface HSTS

HTTP Strict-Transport-Security Annotation.

RFC6797.

Can I use?

Optional Element Summary

Optional Elements

Modifier and Type	Optional Element and Description
boolean	includeSubDomains includeSubDomains directive.
long	maxAge max-age directive, in seconds.

Element Detail

maxAge

public abstract long maxAge

max-age directive, in seconds.

Don't set this to a too high value in order to prevent privacy issues for your users. See this security.stackexchange answer and The double edged sword of HSTS persistence and privacy for tremendous details.

Default to werval.filters.hsts.max_age configuration property value.

Returns:

The max-age directive value, in seconds

Default:

-1L

includeSubDomains

public abstract boolean includeSubDomains

includeSubDomains directive.

Default to werval.filters.hsts.include_sub_domains configuration property value.

Returns:

TRUE if the includeSubDomains directive should be included, FALSE otherwise. Defaults to FALSE.

Default:

false