Merge pull request #2394 from chef/rajeshpaul38/add-nginx-permission-…

…policy/2298 Add permission policy for nginx to block camera and payment
chef · Nov 25, 2021 · ff7f808 · ff7f808
2 parents 3440347 + a72f55d
commit ff7f808
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/omnibus/cookbooks/omnibus-supermarket/templates/nginx.conf.erb b/omnibus/cookbooks/omnibus-supermarket/templates/nginx.conf.erb
@@ -39,6 +39,7 @@ http {
   server_tokens off;
   more_clear_headers Server;
   add_header X-Clacks-Overhead "GNU Terry Pratchett";
+  add_header Permissions-Policy "camera 'none'; payment 'none';";
 
   sendfile <%= @nginx['sendfile'] %>;
   tcp_nopush on;