Disable interest-cohort for privacy reasons

canonical · Apr 15, 2021 · 0b22c02 · 0b22c02
1 parent 6a5b0cb
commit 0b22c02
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/canonicalwebteam/flask_base/app.py b/canonicalwebteam/flask_base/app.py
@@ -125,6 +125,18 @@ def set_cache_control_headers(response):
     return response
 
 
+def set_permissions_policy_headers(response):
+    """ 
+    Sets default permissions policies. This disable some browsers features
+    and APIs.
+    """
+    # Disabling interest-cohort for privacy reasons.
+    # https://wicg.github.io/floc/
+    response.headers["Permissions-Policy"] = "interest-cohort=()"
+
+    return response
+
+
 class FlaskBase(flask.Flask):
     def __init__(
         self,