add minimal Permissions Policy as a starting point

This commit is contained in:
Daniel Micay 2022-10-17 22:27:09 -04:00
parent 4f1aa5bceb
commit d5ed786d2a

View File

@ -4,6 +4,7 @@ add_header Referrer-Policy "no-referrer" always;
add_header Cross-Origin-Opener-Policy "same-origin" always;
add_header Cross-Origin-Embedder-Policy "require-corp" always;
add_header Origin-Agent-Cluster "?1" always;
add_header Permissions-Policy "interest-cohort=()" always;
# obsolete, unsafe and replaced with strong Content-Security-Policy
add_header X-XSS-Protection "0" always;