diff --git a/tests/Feature/Security/SecurityHeadersTest.php b/tests/Feature/Security/SecurityHeadersTest.php index fb3b8c6..cd8a7ed 100644 --- a/tests/Feature/Security/SecurityHeadersTest.php +++ b/tests/Feature/Security/SecurityHeadersTest.php @@ -6,4 +6,5 @@ it('sends HSTS header on all requests', function () { $response->assertHeader('X-Content-Type-Options', 'nosniff'); $response->assertHeader('X-Frame-Options', 'DENY'); $response->assertHeader('Referrer-Policy', 'strict-origin'); + $response->assertHeader('Permissions-Policy', 'geolocation=(), microphone=(), camera=()'); });