feat: security headers set

xebia · Apr 12, 2024 · f507b6e · f507b6e
1 parent 805ea46
commit f507b6e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/xebia_email_signature/serve.py b/src/xebia_email_signature/serve.py
@@ -22,7 +22,7 @@ def prepare_response(response):
     response.headers["X-Frame-Options"] = "SAMEORIGIN"
     response.headers["X-Content-Type-Options"] = "nosniff"
     response.headers["Content-Security-Policy"] = "script-src 'self'"
-    response.headers["Permission-Policy"] = "geolocation=(self 'https://signature.xebia.com'), microphone=(), "
+    response.headers["Permissions-Policy"] = "geolocation=(self 'https://signature.xebia.com'), microphone=(), "
     response.headers["Referrer-Policy"] = "no-referrer-when-downgrade"
     response.headers["X-XSS-Protection"] = "1"
     return response