src/main.rs

@@ -29,10 +29,14 @@ async fn main() -> Result<()> {
     HttpServer::new(move || {
         App::new()
             .app_data(web::Data::new(config.to_owned()))
-            .wrap(DefaultHeaders::new().add((
-                "Onion-Location",
-                config.fc.onion.as_deref().unwrap_or_default(),
-            )))
+            .wrap(
+                DefaultHeaders::new()
+                    .add((
+                        "Onion-Location",
+                        config.fc.onion.as_deref().unwrap_or_default(),
+                    ))
+                    .add(("Permissions-Policy", "interest-cohort=()")),
+            )
             .service(web::scope("/api").service(web::scope("v1").service(api_v1::love)))
             .service(index::page)
             .service(agreements::security)