fix(security): disable browsing topics api in astro and nginx config

Add Permissions-Policy header to disable browsing-topics API to prevent Yandex.Metrika attestation errors
This commit is contained in:
Yuu Ottosoka
2025-07-20 13:29:47 +03:00
parent 710ad62ce5
commit 7e5f97a9de
2 changed files with 8 additions and 0 deletions

View File

@@ -18,6 +18,9 @@ http {
gzip_proxied expired no-cache no-store private auth;
gzip_types text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/xml+rss text/javascript;
# Fix Yandex.Metrika Topics API attestation error
add_header Permissions-Policy "browsing-topics=()" always;
error_page 404 /404.html;
location = /404.html {
root /usr/share/nginx/html;