Add support for feature-policy header

Created on 2 August 2018, over 6 years ago
Updated 3 February 2023, almost 2 years ago

https://securityheaders.com now recommends that sites include a 'feature-policy' header. One that is detailed here: https://scotthelme.co.uk/a-new-security-header-feature-policy/ and here: https://developers.google.com/web/updates/2018/06/feature-policy

It's still pretty new but it'd be a great addition to Seckit.

Feature request
Status

Fixed

Version

1.0

Component

Code

Created by

🇦🇺Australia adammalone Sydney/Australia

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • 🇬🇧United Kingdom mcdruid 🇬🇧🇪🇺

    Some debug slipped into the test in this issue, and has since been reformatted:

    {code}
    $this->assertEqual($expected, $this->drupalGetHeader('Feature-Policy'), t('The feature-policy header is correctly sent.'));
    - debug(array('expected' => $expected, 'received' => $this->drupalGetHeader('Feature-Policy'), 'headers' => $this->drupalGetHeaders()));
    + debug(array(
    + 'expected' => $expected,
    + 'received' => $this->drupalGetHeader('Feature-Policy'),
    + 'headers' => $this->drupalGetHeaders(),
    + ));
    }
    +
    {code}

    I'm about to remove that.

Production build 0.71.5 2024