diff --git a/src/metabase/middleware.clj b/src/metabase/middleware.clj index 2fed9ec6c520528093f946c5d6ca04878a4c54c1..5648497dbea24ace81eb6277e6e989f73ca2e359 100644 --- a/src/metabase/middleware.clj +++ b/src/metabase/middleware.clj @@ -165,9 +165,9 @@ "Base-64 encoded public key for this site's SSL certificate. Specify this to enable HTTP Public Key Pinning. See http://mzl.la/1EnfqBf for more information.") ; TODO - it would be nice if we could make this a proper link in the UI; consider enabling markdown parsing -(defn- public-key-pins-header [] - (when-let [k (ssl-certificate-public-key)] - {"Public-Key-Pins" (format "pin-sha256=\"base64==%s\"; max-age=31536000" k)})) +;(defn- public-key-pins-header [] +; (when-let [k (ssl-certificate-public-key)] +; {"Public-Key-Pins" (format "pin-sha256=\"base64==%s\"; max-age=31536000" k)})) (defn- api-security-headers [] ; don't need to include all the nonsense we include with index.html (merge (cache-prevention-headers)