From a3930b5d25a1ea34c24b533274bf15df0b089594 Mon Sep 17 00:00:00 2001
From: boban <boban.blaskovic@gmail.com>
Date: Sat, 16 May 2026 07:52:20 +0200
Subject: [PATCH] test(security): assert Permissions-Policy header

---
 tests/Feature/Security/SecurityHeadersTest.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tests/Feature/Security/SecurityHeadersTest.php b/tests/Feature/Security/SecurityHeadersTest.php
index fb3b8c6..cd8a7ed 100644
--- a/tests/Feature/Security/SecurityHeadersTest.php
+++ b/tests/Feature/Security/SecurityHeadersTest.php
@@ -6,4 +6,5 @@ it('sends HSTS header on all requests', function () {
     $response->assertHeader('X-Content-Type-Options', 'nosniff');
     $response->assertHeader('X-Frame-Options', 'DENY');
     $response->assertHeader('Referrer-Policy', 'strict-origin');
+    $response->assertHeader('Permissions-Policy', 'geolocation=(), microphone=(), camera=()');
 });