fix: fixed HSTS issue per <chromium/hstspreload.org#198>

ladjs · Oct 16, 2020 · 8b1c97d · 8b1c97d
1 parent 94e6c70
commit 8b1c97d
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/index.js b/index.js
@@ -239,6 +239,10 @@ class Web {
     // remove trailing slashes
     app.use(removeTrailingSlashes());
 
+    // security
+    // (needs to come before i18n so HSTS header gets added)
+    if (this.config.helmet) app.use(helmet(this.config.helmet));
+
     // i18n
     if (this.config.i18n) {
       // create new @ladjs/i18n instance
@@ -262,9 +266,6 @@ class Web {
     // cors
     if (this.config.cors) app.use(cors(this.config.cors));
 
-    // security
-    if (this.config.helmet) app.use(helmet(this.config.helmet));
-
     // compress/gzip
     if (this.config.compress) app.use(compress(this.config.compress));