Merge SEC-10: add Permissions-Policy header

2026-03-13 00:49:34 -07:00
parent 482300b8b1 30fc3470fa
commit 8840317cce
2 changed files with 5 additions and 0 deletions
--- a/internal/ui/ui_test.go
+++ b/internal/ui/ui_test.go
@@ -79,6 +79,7 @@ func assertSecurityHeaders(t *testing.T, h http.Header, label string) {
 		{"X-Frame-Options", "DENY"},
 		{"Strict-Transport-Security", "max-age="},
 		{"Referrer-Policy", "no-referrer"},
+		{"Permissions-Policy", "camera=()"},
 	}
 	for _, c := range checks {
 		val := h.Get(c.header)