Azure App Service部署的.NET 6应用HSTS Header配置问题求助

我使用.NET 6开发了一个Web应用并部署在Azure App Service上，发现Strict-Transport-Security Header仅包含值max-age=31536000，而非预期的max-age=31536000;includeSubDomains;preload。

已尝试的无效方法 #

• 方法1：URL重写规则

<rewrite>
    <rules>
        <rule name="HTTP to HTTPS redirect" stopProcessing="true">
            <match url="(.*)" />
            <conditions>
                <add input="{HTTPS}" pattern="off" ignoreCase="true" />
            </conditions>
            <action type="Redirect" url="https://{HTTP_HOST}/{R:1}" redirectType="Permanent" />
        </rule>
    </rules>
    <outboundRules>
        <rule name="Add Strict-Transport-Security when HTTPS" enabled="true">
            <match serverVariable="RESPONSE_Strict_Transport_Security" pattern=".*" />
            <conditions>
                <add input="{HTTPS}" pattern="on" ignoreCase="true" />
            </conditions>
            <action type="Rewrite" value="max-age=31536000;includeSubDomains;preload" />
        </rule>
    </outboundRules>
</rewrite>

• 方法2：添加自定义Header

<add name="Strict-Transport-Security" value="max-age=31536000; includeSubDomains; preload" />

• 方法3：Program.cs中配置HSTS

builder.Services.AddHsts(options =>
{
    options.Preload = true;
    options.IncludeSubDomains = true;
    options.MaxAge = TimeSpan.FromDays(365);
});

app.UseHsts();

内容的提问来源于stack exchange，提问作者Shah Rizar