diff --git a/src/common/core/headers/headers.lua b/src/common/core/headers/headers.lua index cae9ae603..af44574b6 100644 --- a/src/common/core/headers/headers.lua +++ b/src/common/core/headers/headers.lua @@ -19,7 +19,6 @@ function headers:initialize(ctx) ["CONTENT_SECURITY_POLICY"] = "Content-Security-Policy", ["REFERRER_POLICY"] = "Referrer-Policy", ["PERMISSIONS_POLICY"] = "Permissions-Policy", - ["FEATURE_POLICY"] = "Feature-Policy", ["X_FRAME_OPTIONS"] = "X-Frame-Options", ["X_CONTENT_TYPE_OPTIONS"] = "X-Content-Type-Options", ["X_XSS_PROTECTION"] = "X-XSS-Protection", diff --git a/src/common/core/headers/plugin.json b/src/common/core/headers/plugin.json index 7299600ba..dfb5a5ed1 100644 --- a/src/common/core/headers/plugin.json +++ b/src/common/core/headers/plugin.json @@ -97,15 +97,6 @@ "regex": "^(?![, ])(,? ?([a-z\\-]+)(?!.*[^\\-]\\2=)=(\\*|\\(( ?(self|\\u0022https?:\\/\\/[\\-\\w@:%.+~#=]+[\\-\\w\\(\\)!@:%+.~#?&\\/=$]*\\u0022)(?=[ \\)]))*\\)))*$", "type": "text" }, - "FEATURE_POLICY": { - "context": "multisite", - "default": "accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'none'; battery 'none'; camera 'none'; display-capture 'none'; document-domain 'none'; encrypted-media 'none'; execution-while-not-rendered 'none'; execution-while-out-of-viewport 'none'; fullscreen 'none'; geolocation 'none'; gyroscope 'none'; layout-animation 'none'; legacy-image-formats 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; navigation-override 'none'; payment 'none'; picture-in-picture 'none'; publickey-credentials-get 'none'; speaker-selection 'none'; sync-xhr 'none'; unoptimized-images 'none'; unsized-media 'none'; usb 'none'; screen-wake-lock 'none'; web-share 'none'; xr-spatial-tracking 'none';", - "help": "Value for the Feature-Policy header.", - "id": "feature-policy", - "label": "Feature-Policy", - "regex": "^(?![; ])( ?([\\w\\-]+)(?!.*[^\\-]\\2 )( ('(none|self|strict-dynamic|report-sample|unsafe-inline|unsafe-eval|unsafe-hashes|unsafe-allow-redirects)'|https?:\\/\\/[\\w@:%.+~#=\\-]+[\\w\\(\\)!@:%+.~#?&\\/=$\\-]*))+;)*$", - "type": "text" - }, "X_FRAME_OPTIONS": { "context": "multisite", "default": "SAMEORIGIN",