add permission policy for nginx to block camera and payment

Signed-off-by: Rajesh Paul <rajesh.paul@progress.com>
chef · Nov 23, 2021 · a72f55d · a72f55d
1 parent ae8768b
commit a72f55d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/omnibus/cookbooks/omnibus-supermarket/templates/nginx.conf.erb b/omnibus/cookbooks/omnibus-supermarket/templates/nginx.conf.erb
@@ -39,6 +39,7 @@ http {
   server_tokens off;
   more_clear_headers Server;
   add_header X-Clacks-Overhead "GNU Terry Pratchett";
+  add_header Permissions-Policy "camera 'none'; payment 'none';";
 
   sendfile <%= @nginx['sendfile'] %>;
   tcp_nopush on;