Merge pull request #110 from jianjunz/hsts

taste1981 · web-flow · commit a8841e17f403 · 2019-03-29T12:19:17.000+08:00
Enable HSTS and specify encoding format for HTML pages.
diff --git a/src/samples/conference/public/index.html b/src/samples/conference/public/index.html
@@ -27,7 +27,7 @@
 -->
 
 <html>
-
+  <meta charset="utf-8">
   <head>
     <title>Intel&reg; Collaboration Suite for WebRTC Conference Sample</title>
   </head>
diff --git a/src/samples/conference/samplertcservice.js b/src/samples/conference/samplertcservice.js
@@ -48,11 +48,13 @@ app.use(bodyParser.json());
 app.use(bodyParser.urlencoded({
   extended: true
 }));
+app.disable('x-powered-by');
 
 app.use(function(req, res, next) {
   res.header('Access-Control-Allow-Origin', '*');
   res.header('Access-Control-Allow-Methods', 'POST, GET, PUT, PATCH, OPTIONS, DELETE');
   res.header('Access-Control-Allow-Headers', 'origin, content-type');
+  res.header('Strict-Transport-Security', 'max-age=1024000; includeSubDomain');
   if (req.method == 'OPTIONS') {
     res.send(200);
   } else {
diff --git a/src/samples/p2p/peercall.html b/src/samples/p2p/peercall.html
@@ -7,6 +7,7 @@
 <!DOCTYPE html>
 
 <head>
+  <meta charset="utf-8">
   <title>Intel&reg; Collaboration Suite for WebRTC P2P Direct Call Sample</title>
   <style>
     html{
