fix(security): disable browsing topics api in astro and nginx config

Add Permissions-Policy header to disable browsing-topics API to prevent Yandex.Metrika attestation errors
2025-07-20 13:29:47 +03:00
parent 710ad62ce5
commit 7e5f97a9de
2 changed files with 8 additions and 0 deletions
--- a/astro.config.mjs
+++ b/astro.config.mjs
@@ -15,6 +15,11 @@ export default defineConfig({
      prefixDefaultLocale: false,
    },
  },
+  server: {
+    headers: {
+      'Permissions-Policy': 'browsing-topics=()',
+    },
+  },
  env: {
    schema: {
      YCLIENTS_API_URL: envField.string({ context: 'server', access: 'public' }),