diff --git a/interceptors/SecurityHeaders.cfc b/interceptors/SecurityHeaders.cfc index 978031a..0ffecf2 100644 --- a/interceptors/SecurityHeaders.cfc +++ b/interceptors/SecurityHeaders.cfc @@ -250,12 +250,12 @@ component extends="coldbox.system.Interceptor" { } if ( variables.settings.securityHeaders.hsts.enabled ) { - var headerValue = "max-age: #variables.settings.securityHeaders.hsts[ "max-age" ]#;"; + var headerValue = "max-age=#variables.settings.securityHeaders.hsts[ "max-age" ]#"; if ( variables.settings.securityHeaders.hsts.includeSubDomains ) { - headerValue &= " includeSubDomains"; + headerValue &= "; includeSubDomains"; } if ( variables.settings.securityHeaders.hsts.preload ) { - headerValue &= " preload"; + headerValue &= "; preload"; } event.setHTTPHeader( name: "Strict-Transport-Security", value: headerValue ); }