HSTS Policy

flask_sslify.py

@@ -25,4 +25,11 @@ class SSLify(object):
 
         if not any(criteria):
             url = request.url.replace('http://', 'https://')
-            return redirect(url)
+            r = redirect(url)
+
+            # HSTS policy.
+            r.headers['Strict-Transport-Security'] = 'max-age=31536000'
+
+            return r
+
+

setup.py

@@ -12,7 +12,7 @@ from setuptools import setup
 
 setup(
     name='Flask-SSLify',
-    version='0.1.1',
+    version='0.1.2',
     url='https://github.com/kennethreitz/flask-sslify',
     license='BSD',
     author='Kenneth Reitz',