coop-cloud-chaos-patchs/outline
Archived
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

chore: Return new permissions-policy header on app pages

Browse Source 
closes #2040
This commit is contained in:
Tom Moor
2021-05-12 20:16:55 -07:00
parent 9f226cf3b4
commit 9d03c89c02
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
server/app.js
View File

@ -168,7 +168,12 @@ app.use(mount("/auth", auth));
app.use(mount("/api", api)); app.use(mount("/api", api));
// Sets common security headers by default, such as no-sniff, hsts, hide powered // Sets common security headers by default, such as no-sniff, hsts, hide powered
// by etc // by etc, these are applied after auth and api so they are only returned on
// standard non-XHR accessed routes
app.use(async (ctx, next) => {
ctx.set("Permissions-Policy", "interest-cohort=()");
await next();
});
app.use(helmet()); app.use(helmet());
app.use( app.use(
contentSecurityPolicy({ contentSecurityPolicy({