fix(backend): ajoute l'en-tete Cross-Origin-Resource-Policy sur toutes les reponses

2026-09-23 09:36:10 +02:00
parent 59f050ec5e
commit cfc194a3fb
4 changed files with 11 additions and 4 deletions
@@ -23,8 +23,9 @@ async def interroge(
        ("x-content-type-options", "nosniff"),
        ("x-frame-options", "DENY"),
        ("referrer-policy", "no-referrer"),
+        ("cross-origin-resource-policy", "same-origin"),
    ],
-    ids=["nosniff", "anti_iframe", "referrer"],
+    ids=["nosniff", "anti_iframe", "referrer", "corp"],
 )
 async def test_every_response_carries_the_security_headers(
    client: AsyncClient, entete: str, valeur: str