app/lib/security-txt.mjs

Functions

Imports

It imports no other module of this repo. Imported by app/routes/security-txt.ts.

Source

1/**
2 * RFC 9116. Expires is a fixed date, not "a year from now": a file that renews itself on every
3 * request would keep vouching for a contact nobody has checked. test/security-txt.test.mjs fails
4 * 30 days before it lapses, which is the prompt to confirm the address still works and move it on.
5 */
6export const SECURITY_CONTACT = "security@dustinedwards.info";
7export const SECURITY_TXT_EXPIRES = "2027-09-28T00:00:00.000Z";
8
9/** @param {string} origin */
10export function securityTxt(origin) {
11  return [
12    `Contact: mailto:${SECURITY_CONTACT}`,
13    `Expires: ${SECURITY_TXT_EXPIRES}`,
14    "Preferred-Languages: en",
15    `Canonical: ${origin}/.well-known/security.txt`,
16    "",
17  ].join("\n");
18}