Add comments regarding HSTS max age

src/Microsoft.DotNet.Web.ProjectTemplates/content/RazorPagesWeb-CSharp/Startup.cs

@@ -147,6 +147,7 @@ namespace Company.WebApplication1
             {
                 app.UseExceptionHandler("/Error");
 #if (RequiresHttps)
+                // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
                 app.UseHsts();
             }
 

src/Microsoft.DotNet.Web.ProjectTemplates/content/StarterWeb-CSharp/Startup.cs

@@ -146,6 +146,7 @@ namespace Company.WebApplication1
             {
                 app.UseExceptionHandler("/Home/Error");
 #if (RequiresHttps)
+                // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
                 app.UseHsts();
             }
 

src/Microsoft.DotNet.Web.ProjectTemplates/content/StarterWeb-FSharp/Startup.fs

@@ -31,6 +31,7 @@ type Startup private () =
         else
             app.UseExceptionHandler("/Home/Error") |> ignore
 #if (!NoHttps)
+            // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
             app.UseHsts() |> ignore
 
         app.UseHttpsRedirection() |> ignore

src/Microsoft.DotNet.Web.ProjectTemplates/content/WebApi-CSharp/Startup.cs

@@ -56,6 +56,7 @@ namespace Company.WebApplication1
 #if (RequiresHttps)
             else
             {
+                // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
                 app.UseHsts();
             }
 

src/Microsoft.DotNet.Web.ProjectTemplates/content/WebApi-FSharp/Startup.fs

@@ -29,6 +29,7 @@ type Startup private () =
             app.UseDeveloperExceptionPage() |> ignore
 #if (!NoHttps)
         else
+            // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
             app.UseHsts() |> ignore
 
         app.UseHttpsRedirection() |> ignore
@@ -37,4 +38,4 @@ type Startup private () =
 #endif
         app.UseMvc() |> ignore
 
-    member val Configuration : IConfiguration = null with get, set
+    member val Configuration : IConfiguration = null with get, set

src/Microsoft.DotNet.Web.Spa.ProjectTemplates/content/Angular-CSharp/Startup.cs

@@ -42,6 +42,7 @@ namespace Company.WebApplication1
             {
                 app.UseExceptionHandler("/Error");
 #if (!NoHttps)
+                // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
                 app.UseHsts();
             }
 

src/Microsoft.DotNet.Web.Spa.ProjectTemplates/content/React-CSharp/Startup.cs

@@ -42,6 +42,7 @@ namespace Company.WebApplication1
             {
                 app.UseExceptionHandler("/Error");
 #if (!NoHttps)
+                // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
                 app.UseHsts();
             }
 

src/Microsoft.DotNet.Web.Spa.ProjectTemplates/content/ReactRedux-CSharp/Startup.cs

@@ -42,6 +42,7 @@ namespace Company.WebApplication1
             {
                 app.UseExceptionHandler("/Error");
 #if (!NoHttps)
+                // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
                 app.UseHsts();
             }