From 7011b007a007a031f78875d7408c6f33310efdbe Mon Sep 17 00:00:00 2001 From: Jonah Aragon Date: Wed, 21 Feb 2024 10:51:29 +0000 Subject: [PATCH] Add Permissions-Policy HTTP header (#2408) Signed-off-by: Freddy Signed-off-by: Daniel Gray --- netlify.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/netlify.toml b/netlify.toml index fe4acc16..4631a2a1 100644 --- a/netlify.toml +++ b/netlify.toml @@ -36,6 +36,7 @@ X-Content-Type-Options = "nosniff" Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload" Content-Security-Policy = "default-src 'none'; script-src https://www.privacyguides.org 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src data: 'self'; connect-src https://api.github.com https://*.privacyguides.net 'self'; frame-src https://*.privacyguides.net; frame-ancestors 'none'" + Permissions-Policy = "browsing-topics=(), conversion-measurement=(), interest-cohort=(), accelerometer=(), ambient-light-sensor=(), battery=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), usb=()" [[headers]] for = "/:lang/about/donate/"