test(security): assert Permissions-Policy header

main
boban 2026-05-16 07:52:20 +02:00
parent 3f6b281c62
commit a3930b5d25
1 changed files with 1 additions and 0 deletions

View File

@ -6,4 +6,5 @@ it('sends HSTS header on all requests', function () {
$response->assertHeader('X-Content-Type-Options', 'nosniff');
$response->assertHeader('X-Frame-Options', 'DENY');
$response->assertHeader('Referrer-Policy', 'strict-origin');
$response->assertHeader('Permissions-Policy', 'geolocation=(), microphone=(), camera=()');
});