Skip to content

Enable HSTS in production and add HTTPS redirection#1

Merged
joperezr merged 19 commits intomainfrom
hsts
Oct 30, 2025
Merged

Enable HSTS in production and add HTTPS redirection#1
joperezr merged 19 commits intomainfrom
hsts

Conversation

@IEvangelist
Copy link
Copy Markdown
Member

@IEvangelist IEvangelist commented Oct 29, 2025

In this PR:

  • Address security scan: Added HSTS in prod.
  • Minor text clean up around prerequisites.
  • Update Aspire CLI content.
  • Remove custom SynchedTabs component, now that the native Tabs component supports sync.
  • Address misc feedback.
  • Fixed report contrast issue on Safari.
  • De-duplicate Install Aspire CLI content.
  • Move .slnx to repo root directory.
  • Correct some inconsistencies with capitalization.

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR enhances security for the static host by adding HTTPS redirection and HSTS (HTTP Strict Transport Security) middleware, along with some minor code formatting improvements.

  • Adds HSTS middleware (only enabled in production environments)
  • Adds HTTPS redirection middleware
  • Removes trailing whitespace from several lines

<TabItem label="PowerShell" icon="seti:powershell">
<Code
lang="powershell"
code='Invoke-RestMethod https://aspire.dev/install.ps1 -OutFile aspire-install.ps1'
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should this instead be the exact line we use in the aspire repo? e.g. iex "& { $(irm https://aspire.dev/install.ps1) }" and curl bash for the non-Windows one

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated.

Copy link
Copy Markdown
Member

@joperezr joperezr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Left some minor comments but otherwise this looks good

…n; update welcome banner with migration notice
@joperezr joperezr merged commit 5f2ee56 into main Oct 30, 2025
1 check passed
@joperezr joperezr deleted the hsts branch October 30, 2025 18:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants