[SHIRO-740] SslFilter with HTTP Strict Transport Security (HSTS)

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Resolved
• Fix Version/s: 1.7.0, 2.0.0-alpha
• Assignee: Francois Papon
• Reporter: Francois Papon
• Created: 01/Feb/20 12:48
• Updated: 20/Oct/20 19:57
• Resolved: 20/Oct/20 19:57

Description

HTTP Strict Transport Security (HSTS) would be a nice addition for all the SSL only sites out there. I think in recent years more and more pages have gone full SSL, with good reasons to do so. It is a bit problematic with SslFilter since this one is path based. If you go HSTS then everything on the site uses https. This might break thinks if you have a path with ssl and one without. You can do that with shiro but not with HSTS.

Issue Links

• links to: GitHub Pull Request #55