strictTransportSecurity property

String? strictTransportSecurity

HSTS. Only emitted over HTTPS — sending it over plain HTTP is meaningless, and browsers ignore it there. Defaults to one year plus subdomains when APP_SECURE is on; pass an explicit value to override, or an empty string to suppress it.

Implementation

final String? strictTransportSecurity;