diff --git a/backend/app.js b/backend/app.js index 971f81c..767d972 100644 --- a/backend/app.js +++ b/backend/app.js @@ -44,13 +44,14 @@ app.use( frameSrc: ["'none'"], }, }, - hsts: config.production - ? { - maxAge: 31536000, - includeSubDomains: true, - preload: true, - } - : false, + hsts: + config.production && process.env.DISABLE_HSTS !== 'true' + ? { + maxAge: 31536000, + includeSubDomains: true, + preload: true, + } + : false, }) ); app.use(compression());