blob: e6e3231921fef6b33baa6ea6f3d7b25c1fd6d643 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
|
/* Any copyright is dedicated to the Public Domain.
* http://creativecommons.org/publicdomain/zero/1.0/ */
"use strict";
function handleRequest(request, response) {
response.setHeader("Content-Type", "text/plain; charset=utf-8", false);
let issue;
switch (request.queryString) {
case "badSyntax":
response.setHeader("Strict-Transport-Security", '"');
issue = "is not syntactically correct.";
break;
case "noMaxAge":
response.setHeader("Strict-Transport-Security", "max-age444");
issue = "does not include a max-age directive.";
break;
case "invalidIncludeSubDomains":
response.setHeader("Strict-Transport-Security", "includeSubDomains=abc");
issue = "includes an invalid includeSubDomains directive.";
break;
case "invalidMaxAge":
response.setHeader("Strict-Transport-Security", "max-age=abc");
issue = "includes an invalid max-age directive.";
break;
case "multipleIncludeSubDomains":
response.setHeader(
"Strict-Transport-Security",
"includeSubDomains; includeSubDomains"
);
issue = "includes multiple includeSubDomains directives.";
break;
case "multipleMaxAge":
response.setHeader(
"Strict-Transport-Security",
"max-age=444; max-age=999"
);
issue = "includes multiple max-age directives.";
break;
}
response.write("This page is served with a STS header that " + issue);
}
|
