From 11c6ebea2e5bebff2f3fb30e3168bb89549f0532 Mon Sep 17 00:00:00 2001 From: Ryan Brandenburg Date: Mon, 20 Aug 2018 11:02:34 -0700 Subject: [PATCH] Add comments regarding HSTS max age --- .../content/RazorPagesWeb-CSharp/Startup.cs | 1 + .../content/StarterWeb-CSharp/Startup.cs | 1 + .../content/StarterWeb-FSharp/Startup.fs | 1 + .../content/WebApi-CSharp/Startup.cs | 1 + .../content/WebApi-FSharp/Startup.fs | 3 ++- .../content/Angular-CSharp/Startup.cs | 1 + .../content/React-CSharp/Startup.cs | 1 + .../content/ReactRedux-CSharp/Startup.cs | 1 + 8 files changed, 9 insertions(+), 1 deletion(-) diff --git a/src/Microsoft.DotNet.Web.ProjectTemplates/content/RazorPagesWeb-CSharp/Startup.cs b/src/Microsoft.DotNet.Web.ProjectTemplates/content/RazorPagesWeb-CSharp/Startup.cs index a9827bb88d..905a97a4b5 100644 --- a/src/Microsoft.DotNet.Web.ProjectTemplates/content/RazorPagesWeb-CSharp/Startup.cs +++ b/src/Microsoft.DotNet.Web.ProjectTemplates/content/RazorPagesWeb-CSharp/Startup.cs @@ -147,6 +147,7 @@ namespace Company.WebApplication1 { app.UseExceptionHandler("/Error"); #if (RequiresHttps) + // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts. app.UseHsts(); } diff --git a/src/Microsoft.DotNet.Web.ProjectTemplates/content/StarterWeb-CSharp/Startup.cs b/src/Microsoft.DotNet.Web.ProjectTemplates/content/StarterWeb-CSharp/Startup.cs index 9bf4144391..d3ca04fb6f 100644 --- a/src/Microsoft.DotNet.Web.ProjectTemplates/content/StarterWeb-CSharp/Startup.cs +++ b/src/Microsoft.DotNet.Web.ProjectTemplates/content/StarterWeb-CSharp/Startup.cs @@ -146,6 +146,7 @@ namespace Company.WebApplication1 { app.UseExceptionHandler("/Home/Error"); #if (RequiresHttps) + // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts. app.UseHsts(); } diff --git a/src/Microsoft.DotNet.Web.ProjectTemplates/content/StarterWeb-FSharp/Startup.fs b/src/Microsoft.DotNet.Web.ProjectTemplates/content/StarterWeb-FSharp/Startup.fs index fa6d675c7e..90b177c8a1 100644 --- a/src/Microsoft.DotNet.Web.ProjectTemplates/content/StarterWeb-FSharp/Startup.fs +++ b/src/Microsoft.DotNet.Web.ProjectTemplates/content/StarterWeb-FSharp/Startup.fs @@ -31,6 +31,7 @@ type Startup private () = else app.UseExceptionHandler("/Home/Error") |> ignore #if (!NoHttps) + // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts. app.UseHsts() |> ignore app.UseHttpsRedirection() |> ignore diff --git a/src/Microsoft.DotNet.Web.ProjectTemplates/content/WebApi-CSharp/Startup.cs b/src/Microsoft.DotNet.Web.ProjectTemplates/content/WebApi-CSharp/Startup.cs index 2c44b43d63..55f223d4e2 100644 --- a/src/Microsoft.DotNet.Web.ProjectTemplates/content/WebApi-CSharp/Startup.cs +++ b/src/Microsoft.DotNet.Web.ProjectTemplates/content/WebApi-CSharp/Startup.cs @@ -56,6 +56,7 @@ namespace Company.WebApplication1 #if (RequiresHttps) else { + // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts. app.UseHsts(); } diff --git a/src/Microsoft.DotNet.Web.ProjectTemplates/content/WebApi-FSharp/Startup.fs b/src/Microsoft.DotNet.Web.ProjectTemplates/content/WebApi-FSharp/Startup.fs index 33d8beeef4..585cb2e7b4 100644 --- a/src/Microsoft.DotNet.Web.ProjectTemplates/content/WebApi-FSharp/Startup.fs +++ b/src/Microsoft.DotNet.Web.ProjectTemplates/content/WebApi-FSharp/Startup.fs @@ -29,6 +29,7 @@ type Startup private () = app.UseDeveloperExceptionPage() |> ignore #if (!NoHttps) else + // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts. app.UseHsts() |> ignore app.UseHttpsRedirection() |> ignore @@ -37,4 +38,4 @@ type Startup private () = #endif app.UseMvc() |> ignore - member val Configuration : IConfiguration = null with get, set \ No newline at end of file + member val Configuration : IConfiguration = null with get, set diff --git a/src/Microsoft.DotNet.Web.Spa.ProjectTemplates/content/Angular-CSharp/Startup.cs b/src/Microsoft.DotNet.Web.Spa.ProjectTemplates/content/Angular-CSharp/Startup.cs index d76e75a557..ce4f4cf902 100644 --- a/src/Microsoft.DotNet.Web.Spa.ProjectTemplates/content/Angular-CSharp/Startup.cs +++ b/src/Microsoft.DotNet.Web.Spa.ProjectTemplates/content/Angular-CSharp/Startup.cs @@ -42,6 +42,7 @@ namespace Company.WebApplication1 { app.UseExceptionHandler("/Error"); #if (!NoHttps) + // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts. app.UseHsts(); } diff --git a/src/Microsoft.DotNet.Web.Spa.ProjectTemplates/content/React-CSharp/Startup.cs b/src/Microsoft.DotNet.Web.Spa.ProjectTemplates/content/React-CSharp/Startup.cs index 1bf655a29d..8f8502913a 100644 --- a/src/Microsoft.DotNet.Web.Spa.ProjectTemplates/content/React-CSharp/Startup.cs +++ b/src/Microsoft.DotNet.Web.Spa.ProjectTemplates/content/React-CSharp/Startup.cs @@ -42,6 +42,7 @@ namespace Company.WebApplication1 { app.UseExceptionHandler("/Error"); #if (!NoHttps) + // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts. app.UseHsts(); } diff --git a/src/Microsoft.DotNet.Web.Spa.ProjectTemplates/content/ReactRedux-CSharp/Startup.cs b/src/Microsoft.DotNet.Web.Spa.ProjectTemplates/content/ReactRedux-CSharp/Startup.cs index 1bf655a29d..8f8502913a 100644 --- a/src/Microsoft.DotNet.Web.Spa.ProjectTemplates/content/ReactRedux-CSharp/Startup.cs +++ b/src/Microsoft.DotNet.Web.Spa.ProjectTemplates/content/ReactRedux-CSharp/Startup.cs @@ -42,6 +42,7 @@ namespace Company.WebApplication1 { app.UseExceptionHandler("/Error"); #if (!NoHttps) + // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts. app.UseHsts(); }