accept command line arg for a custom header

README.md

@@ -61,3 +61,6 @@ This will install `http-server` globally so that it may be run from the command
 `-h` or `--help` Displays a list of commands and exits.
 
 `-c` Set cache time (in seconds) for cache-control max-age header, e.g. -c10 for 10 seconds. To disable caching, use -c-1.
+
+`-H` or `--header` Send the specified header with responses, e.g.
+`-H "Strict-Transport-Security: max-age=315360000; includeSubdomains"`.

bin/http-server

@@ -21,6 +21,8 @@ if (argv.h || argv.help) {
     "  -o                 Open browser window after staring the server",
     "  -c                 Set cache time (in seconds). e.g. -c10 for 10 seconds.",
     "                     To disable caching, use -c-1.",
+    "  -H --header        Send the specified header with responses,",
+    "                     e.g. -H 'X-MY-HEADER: foo'",
     "  -h --help          Print this list and exit."
   ].join('\n'));
   process.exit();
@@ -47,20 +49,31 @@ if (!port) {
   listen(port);
 }
 
+function addHeader(headers, header) {
+  if (!header || !header.indexOf) return;
+  var idx = header.indexOf(':'),
+      key = header.substring(0, idx),
+      val = header.substring(idx + 1).trim();
+  headers[key] = val;
+}
+
 function listen(port) {
   var options = {
     root: argv._[0],
     cache: argv.c,
     showDir: argv.d,
     autoIndex: argv.i,
     ext: argv.e || argv.ext,
+    headers: {},
     logFn: requestLogger
   };
 
   if (argv.cors) {
-    options.headers = { 'Access-Control-Allow-Origin': '*' };
+    options.headers['Access-Control-Allow-Origin'] = '*';
   }
 
+  addHeader(options.headers, argv.H || argv.header);
+
   var server = httpServer.createServer(options);
   server.listen(port, host, function() {
     log('Starting up http-server, serving '.yellow