ti.sil/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2025-12-12 04:15:25 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Merge pull request #6432 from diwakar-s-maurya/main

Browse source 
fix: Prevent crash while setting Strict-Transport-Security security header
This commit is contained in:
Timothy Jaeryang Baek 2024-10-26 00:23:15 -07:00 committed by GitHub
commit 554e181ccb
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
backend/open_webui/utils/security_headers.py
View file

@ -60,7 +60,7 @@ def set_hsts(value: str):
pattern = r"^max-age=(\d+)(;includeSubDomains)?(;preload)?$" pattern = r"^max-age=(\d+)(;includeSubDomains)?(;preload)?$"
match = re.match(pattern, value, re.IGNORECASE) match = re.match(pattern, value, re.IGNORECASE)
if not match: if not match:
return "max-age=31536000;includeSubDomains" value = "max-age=31536000;includeSubDomains"
return {"Strict-Transport-Security": value} return {"Strict-Transport-Security": value}