diff --git a/spring-cloud-gateway-server/src/main/java/org/springframework/cloud/gateway/filter/factory/SecureHeadersProperties.java b/spring-cloud-gateway-server/src/main/java/org/springframework/cloud/gateway/filter/factory/SecureHeadersProperties.java index e3fc3d3a..6802575a 100644 --- a/spring-cloud-gateway-server/src/main/java/org/springframework/cloud/gateway/filter/factory/SecureHeadersProperties.java +++ b/spring-cloud-gateway-server/src/main/java/org/springframework/cloud/gateway/filter/factory/SecureHeadersProperties.java @@ -35,15 +35,12 @@ public class SecureHeadersProperties { /** * Strict transport security header default. */ - public static final String STRICT_TRANSPORT_SECURITY_HEADER_DEFAULT = "max-age=631138519"; // ; - // includeSubDomains - // preload") + public static final String STRICT_TRANSPORT_SECURITY_HEADER_DEFAULT = "max-age=631138519"; /** * Frame Options header default. */ - public static final String X_FRAME_OPTIONS_HEADER_DEFAULT = "DENY"; // SAMEORIGIN = - // ALLOW-FROM + public static final String X_FRAME_OPTIONS_HEADER_DEFAULT = "DENY"; /** * Content-Type Options header default. @@ -53,19 +50,7 @@ public class SecureHeadersProperties { /** * Referrer Policy header default. */ - public static final String REFERRER_POLICY_HEADER_DEFAULT = "no-referrer"; // no-referrer-when-downgrade - // = - // origin - // = - // origin-when-cross-origin - // = - // same-origin - // = - // strict-origin - // = - // strict-origin-when-cross-origin - // = - // unsafe-url + public static final String REFERRER_POLICY_HEADER_DEFAULT = "no-referrer"; /** * Content-Security Policy header default.