{"action":"created","issue":{"url":"https://api.github.com/repos/cloudfoundry/staticfile-buildpack/issues/82","repository_url":"https://api.github.com/repos/cloudfoundry/staticfile-buildpack","labels_url":"https://api.github.com/repos/cloudfoundry/staticfile-buildpack/issues/82/labels{/name}","comments_url":"https://api.github.com/repos/cloudfoundry/staticfile-buildpack/issues/82/comments","events_url":"https://api.github.com/repos/cloudfoundry/staticfile-buildpack/issues/82/events","html_url":"https://github.com/cloudfoundry/staticfile-buildpack/issues/82","id":173009821,"number":82,"title":"Feature request: HSTS support","user":{"login":"nertzy","id":2488,"avatar_url":"https://avatars.githubusercontent.com/u/2488?v=3","gravatar_id":"","url":"https://api.github.com/users/nertzy","html_url":"https://github.com/nertzy","followers_url":"https://api.github.com/users/nertzy/followers","following_url":"https://api.github.com/users/nertzy/following{/other_user}","gists_url":"https://api.github.com/users/nertzy/gists{/gist_id}","starred_url":"https://api.github.com/users/nertzy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nertzy/subscriptions","organizations_url":"https://api.github.com/users/nertzy/orgs","repos_url":"https://api.github.com/users/nertzy/repos","events_url":"https://api.github.com/users/nertzy/events{/privacy}","received_events_url":"https://api.github.com/users/nertzy/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/cloudfoundry/staticfile-buildpack/labels/unscheduled","name":"unscheduled","color":"D9D9D9"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-08-24T17:17:38Z","updated_at":"2016-08-24T17:17:42Z","closed_at":null,"body":"In https://github.com/cloudfoundry/staticfile-buildpack/pull/37 there was a discussion of how to best implement [HTTP Strict Transport Security](https://developer.mozilla.org/en-US/docs/Web/Security/HTTP_strict_transport_security).\r\n\r\nI agree with that conversation that the best place to store this configuration is the Staticfile.\r\n\r\nOne caveat is that I wouldn't want this activated in any environments where HTTPS wasn't enabled, since any users that hit the site while it's deployed that way would be blocked from hitting the HTTP site for a long time.\r\n\r\nTherefore it probably makes the most sense to require the `FORCE_HTTPS` environment variable to be set as well before this would take any effect. (Maybe that should be moved to the Staticfile as well?)"},"comment":{"url":"https://api.github.com/repos/cloudfoundry/staticfile-buildpack/issues/comments/242142133","html_url":"https://github.com/cloudfoundry/staticfile-buildpack/issues/82#issuecomment-242142133","issue_url":"https://api.github.com/repos/cloudfoundry/staticfile-buildpack/issues/82","id":242142133,"user":{"login":"cf-gitbot","id":5589368,"avatar_url":"https://avatars.githubusercontent.com/u/5589368?v=3","gravatar_id":"","url":"https://api.github.com/users/cf-gitbot","html_url":"https://github.com/cf-gitbot","followers_url":"https://api.github.com/users/cf-gitbot/followers","following_url":"https://api.github.com/users/cf-gitbot/following{/other_user}","gists_url":"https://api.github.com/users/cf-gitbot/gists{/gist_id}","starred_url":"https://api.github.com/users/cf-gitbot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cf-gitbot/subscriptions","organizations_url":"https://api.github.com/users/cf-gitbot/orgs","repos_url":"https://api.github.com/users/cf-gitbot/repos","events_url":"https://api.github.com/users/cf-gitbot/events{/privacy}","received_events_url":"https://api.github.com/users/cf-gitbot/received_events","type":"User","site_admin":false},"created_at":"2016-08-24T17:17:42Z","updated_at":"2016-08-24T17:17:42Z","body":"We have created an issue in Pivotal Tracker to manage this: \n\nhttps://www.pivotaltracker.com/story/show/128980925 \n\nThe labels on this github issue will be updated when the story is started."}}
{"actor":{"display_login":"cf-gitbot"}}