feat(root): add additional security header

spicyzboss · Mar 31, 2024 · f43a587 · f43a587
1 parent ddd314b
commit f43a587
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/apps/root/src/routes/plugin@security.ts b/apps/root/src/routes/plugin@security.ts
@@ -1,9 +1,22 @@
 import { RequestHandler } from "@builder.io/qwik-city";
 
 export const onRequest: RequestHandler = ({ headers }) => {
+  const permissions = [
+    'accelerometer=()',
+    'camera=()',
+    'geolocation=()',
+    'gyroscope=()',
+    'magnetometer=()',
+    'microphone=()',
+    'payment=()',
+    'usb=()'
+  ];
+
   const securityHeaders = {
     'X-Frame-Options': 'sameorigin',
     'X-XSS-Protection': '1; mode=block',
+    'Referrer-Policy': 'same-origin',
+    'Permissions-Policy': permissions.join('; '),
   };
 
   Object.entries(securityHeaders).map(([key, value]) => headers.set(key, value));