diff --git a/.gitlab/development-values.yaml b/.gitlab/development-values.yaml index e99a88b3f56d21446adc1c31b980f24f966eb4dc..d04ac64b3aa97cb0caffa5406791d67b719d8cc2 100644 --- a/.gitlab/development-values.yaml +++ b/.gitlab/development-values.yaml @@ -51,6 +51,7 @@ ingress: more_set_headers "X-Content-Type-Options: nosniff"; more_set_headers "ReferrerPolicy: origin"; more_set_headers "X-XSS-Protection: 1; mode=block"; + more_set_headers "Permissions-Policy: interest-cohort=()"; if ($arg_out = "results-with-style") { more_set_headers "X-Frame-Options: allow-from https://scripts.zdv.uni-mainz.de/"; } diff --git a/.gitlab/production-values.yaml b/.gitlab/production-values.yaml index 76a9603c240183714d8b980309db22ee665a963c..90e92bae792464ae231457b88d9ab93f3ac2a645 100644 --- a/.gitlab/production-values.yaml +++ b/.gitlab/production-values.yaml @@ -71,6 +71,7 @@ ingress: more_set_headers "X-Content-Type-Options: nosniff"; more_set_headers "ReferrerPolicy: origin"; more_set_headers "X-XSS-Protection: 1; mode=block"; + more_set_headers "Permissions-Policy: interest-cohort=()"; if ($arg_out = "results-with-style") { more_set_headers "X-Frame-Options: allow-from https://scripts.zdv.uni-mainz.de/"; } diff --git a/.gitlab/review-apps-values.yaml b/.gitlab/review-apps-values.yaml index cb1109f7e75b03e10071418d5abe9bdab391c7c1..b187cd9331fdbae73cb3d547afed19e9aabe70a7 100644 --- a/.gitlab/review-apps-values.yaml +++ b/.gitlab/review-apps-values.yaml @@ -17,6 +17,7 @@ ingress: more_set_headers "X-Content-Type-Options: nosniff"; more_set_headers "ReferrerPolicy: origin"; more_set_headers "X-XSS-Protection: 1; mode=block"; + more_set_headers "Permissions-Policy: interest-cohort=()"; if ($arg_out = "results-with-style") { more_set_headers "X-Frame-Options: allow-from https://scripts.zdv.uni-mainz.de/"; }