test(security): assert Permissions-Policy header

2026-05-16 07:52:20 +02:00 · 2026-05-16 07:52:20 +02:00 · a3930b5d25
parent 3f6b281c62
commit a3930b5d25
1 changed files with 1 additions and 0 deletions
--- a/tests/Feature/Security/SecurityHeadersTest.php
+++ b/tests/Feature/Security/SecurityHeadersTest.php
@ -6,4 +6,5 @@ it('sends HSTS header on all requests', function () {
    $response->assertHeader('X-Content-Type-Options', 'nosniff');
    $response->assertHeader('X-Frame-Options', 'DENY');
    $response->assertHeader('Referrer-Policy', 'strict-origin');
+    $response->assertHeader('Permissions-Policy', 'geolocation=(), microphone=(), camera=()');
 });