chore(permissions): add interest-cohort (#213)

* chore(permissions): add interest-cohort * Update index.test.ts * Update index.test.ts * Create friendly-drinks-cheat.md
mcansh · Jan 2, 2025 · 4105e69 · 4105e69
1 parent 02c4017
commit 4105e69
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 1 deletion.
diff --git a/.changeset/friendly-drinks-cheat.md b/.changeset/friendly-drinks-cheat.md
@@ -0,0 +1,5 @@
+---
+"@mcansh/http-helmet": patch
+---
+
+add support for interest-cohort to permissions policy
diff --git a/packages/http-helmet/__tests__/index.test.ts b/packages/http-helmet/__tests__/index.test.ts
@@ -24,6 +24,7 @@ it("generates a config", () => {
       autoplay: ["https://example.com"],
       camera: ["*"],
       fullscreen: ["self", "https://example.com", "https://example.org"],
+      interestCohort: [],
     },
     "X-XSS-Protection": "1; report=https://google.com",
     "Cross-Origin-Embedder-Policy": "require-corp",
@@ -42,7 +43,7 @@ it("generates a config", () => {
     "upgrade-insecure-requests; default-src 'self'; script-src 'sha512-sdhgsgh'; img-src 'none'",
   );
   expect(headers.get("Permissions-Policy")).toBe(
-    `battery=(), accelerometer=(self), autoplay=("https://example.com"), camera=*, fullscreen=(self "https://example.com" "https://example.org")`,
+    `battery=(), accelerometer=(self), autoplay=("https://example.com"), camera=*, fullscreen=(self "https://example.com" "https://example.org"), interest-cohort=()`
   );
   expect(headers.get("X-XSS-Protection")).toBe("1; report=https://google.com");
   expect(headers.get("Cross-Origin-Embedder-Policy")).toBe("require-corp");

diff --git a/packages/http-helmet/src/rules/permissions.ts b/packages/http-helmet/src/rules/permissions.ts
@@ -16,6 +16,7 @@ type KnownPermissions = LiteralUnion<
   | "gamepad"
   | "geolocation"
   | "gyroscope"
+  | "interestCohort"
   | "layoutAnimations"
   | "legacyImageFormats"
   | "magnetometer"