From: Tom Hughes <tom@compton.nu>
Date: Thu, 8 Feb 2018 19:13:36 +0000 (+0000)
Subject: Disable HSTS for Firefox 52 to avoid issues with remote editing
X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/2443cfc7684f070dac2dd89772db3a3db5e50a78

Disable HSTS for Firefox 52 to avoid issues with remote editing
---

diff --git a/cookbooks/web/templates/default/apache.frontend.erb b/cookbooks/web/templates/default/apache.frontend.erb
index a950d7746..b2bf38a2e 100644
--- a/cookbooks/web/templates/default/apache.frontend.erb
+++ b/cookbooks/web/templates/default/apache.frontend.erb
@@ -17,6 +17,12 @@
   SSLProxyEngine on
   SSLCertificateFile /etc/ssl/certs/www.openstreetmap.org.pem
   SSLCertificateKeyFile /etc/ssl/private/www.openstreetmap.org.key
+
+  #
+  # Disable HSTS for Firefox 52 to avoid issues with remote editing
+  #
+  BrowserMatch Firefox/52 no-hsts
+  Header set Strict-Transport-Security "max-age=0" env=no-hsts
 <% end -%>
 
   #