fixed: set Access-Control-Max-Age under 30m

Per Fortify security assessment
PaloAltoNetworks · Jul 24, 2019 · 94747c4 · 94747c4
1 parent 3da6454
commit 94747c4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rest_server_helpers.go b/rest_server_helpers.go
@@ -57,7 +57,7 @@ func makeCORSHandler(origin string) func(w http.ResponseWriter, r *http.Request)
 		}
 		_, writeEncoding, _ := elemental.EncodingFromHeaders(r.Header)
 		setCommonHeader(w, o, writeEncoding)
-		w.Header().Set("Access-Control-Max-Age", "86400")
+		w.Header().Set("Access-Control-Max-Age", "1500")
 		w.WriteHeader(http.StatusOK)
 	}
 }