diff --git a/nginx/snippets/security-headers.conf b/nginx/snippets/security-headers.conf index 452cb06..8420460 100644 --- a/nginx/snippets/security-headers.conf +++ b/nginx/snippets/security-headers.conf @@ -4,6 +4,7 @@ add_header Referrer-Policy "no-referrer" always; add_header Cross-Origin-Opener-Policy "same-origin" always; add_header Cross-Origin-Embedder-Policy "require-corp" always; add_header Origin-Agent-Cluster "?1" always; +add_header Permissions-Policy "interest-cohort=()" always; # obsolete, unsafe and replaced with strong Content-Security-Policy add_header X-XSS-Protection "0" always;