HSTS check fail with Connect Security Requirements Tester (CSRT)

Jira Development Jira Cloud
, , , ,
28

Hi [dchouksey89],

I have same issues got and solved.
In my case HSTS is exists in response header when call all api request but when plugin loaded first time in Atlassian that time HSTS header is missed because first time only loaded ui through servlet.
Now I have added HSTS header here and issue solved.

response.setHeader(“Strict-Transport-Security”, “max-age=31536000; includeSubDomains; preload”);

You can also check if this types of issues you have.

Thanks