Add HTTP header to explicitly opt out of FLoC by default (#16036)
Fixes #16034
This commit is contained in:
parent
bb68a9570e
commit
71f335c2fc
|
@ -116,6 +116,7 @@ Rails.application.configure do
|
||||||
'X-Frame-Options' => 'DENY',
|
'X-Frame-Options' => 'DENY',
|
||||||
'X-Content-Type-Options' => 'nosniff',
|
'X-Content-Type-Options' => 'nosniff',
|
||||||
'X-XSS-Protection' => '1; mode=block',
|
'X-XSS-Protection' => '1; mode=block',
|
||||||
|
'Permissions-Policy' => 'interest-cohort=()',
|
||||||
}
|
}
|
||||||
|
|
||||||
config.x.otp_secret = ENV.fetch('OTP_SECRET')
|
config.x.otp_secret = ENV.fetch('OTP_SECRET')
|
||||||
|
|
Loading…
Reference in New Issue