helmetjs/hsts

Change the behavior when options.maxAge == null

EvanHahn opened this issue · 1 comments

EvanHahn commented

Currently, these are equivalent:

hsts({})
hsts({maxAge: null})
hsts({maxAge: undefined})

They shouldn't be—supplying the parameter (at all, even as a nil value) should be considered invalid.

EvanHahn commented

This will be deployed in hsts@3. Follow #29 for progress there.