diff options
| author | Claire <claire.github-309c@sitedethib.com> | 2021-04-13 23:43:41 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-04-13 23:43:41 +0200 |
| commit | 71f335c2fcac974af4672cb521751ba6cdee06a6 (patch) | |
| tree | 105808601f711b564592dd31853c90d56a7ba413 /config/environments | |
| parent | bb68a9570efcf6ccc176e226a8b2637e1fc84ae7 (diff) | |
Add HTTP header to explicitly opt out of FLoC by default (#16036)
Fixes #16034
Diffstat (limited to 'config/environments')
| -rw-r--r-- | config/environments/production.rb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/config/environments/production.rb b/config/environments/production.rb index 6df0a3365..22be14749 100644 --- a/config/environments/production.rb +++ b/config/environments/production.rb @@ -116,6 +116,7 @@ Rails.application.configure do 'X-Frame-Options' => 'DENY', 'X-Content-Type-Options' => 'nosniff', 'X-XSS-Protection' => '1; mode=block', + 'Permissions-Policy' => 'interest-cohort=()', } config.x.otp_secret = ENV.fetch('OTP_SECRET') |