Add HSTS header too.

qinxgit · qinxgit · commit 4395ef4e937a · 2016-03-24T14:30:46.000-07:00
diff --git a/AzureCloudServiceSample/WebRoleSample/Global.asax.cs b/AzureCloudServiceSample/WebRoleSample/Global.asax.cs
@@ -17,5 +17,11 @@ protected void Application_Start()
             RouteConfig.RegisterRoutes(RouteTable.Routes);
             BundleConfig.RegisterBundles(BundleTable.Bundles);
         }
+
+        protected void Application_EndRequest(Object sender, EventArgs e)
+        {
+            HttpContext context = HttpContext.Current;
+            context.Response.AddHeader("Strict-Transport-Security", "max-age=15724800;includeSubDomains");
+        }
     }
 }

Original file line number	Diff line number	Diff line change
`@@ -17,5 +17,11 @@ protected void Application_Start()`
`17`	`17`	`RouteConfig.RegisterRoutes(RouteTable.Routes);`
`18`	`18`	`BundleConfig.RegisterBundles(BundleTable.Bundles);`
`19`	`19`	`}`
	`20`	`+`
	`21`	`+ protected void Application_EndRequest(Object sender, EventArgs e)`
	`22`	`+ {`
	`23`	`+ HttpContext context = HttpContext.Current;`
	`24`	`+ context.Response.AddHeader("Strict-Transport-Security", "max-age=15724800;includeSubDomains");`
	`25`	`+ }`
`20`	`26`	`}`
`21`	`27`	`}`