diff --git a/package.json b/package.json index ce2a644de..cc5f10e65 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "hono", - "version": "4.13.1", + "version": "4.13.2", "description": "Web framework built on Web Standards", "main": "dist/cjs/index.js", "type": "module", diff --git a/src/middleware/secure-headers/index.test.ts b/src/middleware/secure-headers/index.test.ts index aa8d8dfcd..cf56337e3 100644 --- a/src/middleware/secure-headers/index.test.ts +++ b/src/middleware/secure-headers/index.test.ts @@ -181,6 +181,8 @@ describe('Secure Headers Middleware', () => { accelerometer: ['https://*.example.com'], gyroscope: ['src'], magnetometer: ['https://a.example.com', 'https://b.example.com'], + mediasession: ['self'], + deferredFetch: ['none'], }, }) ) @@ -190,7 +192,8 @@ describe('Secure Headers Middleware', () => { 'fullscreen=(self), bluetooth=(), payment=(self "example.com"), sync-xhr=(), camera=(), microphone=*, ' + 'geolocation=*, usb=(self "https://a.example.com" "https://b.example.com"), ' + 'accelerometer=("https://*.example.com"), gyroscope=(src), ' + - 'magnetometer=("https://a.example.com" "https://b.example.com")' + 'magnetometer=("https://a.example.com" "https://b.example.com"), ' + + 'mediasession=(self), deferred-fetch=()' ) }) diff --git a/src/middleware/secure-headers/permissions-policy.ts b/src/middleware/secure-headers/permissions-policy.ts index de8c90c35..32b1b6e4f 100644 --- a/src/middleware/secure-headers/permissions-policy.ts +++ b/src/middleware/secure-headers/permissions-policy.ts @@ -21,6 +21,7 @@ type StandardizedFeatures = | 'chUaBitness' | 'chUaFullVersion' | 'chUaFullVersionList' + | 'chUaHighEntropyValues' | 'chUaMobile' | 'chUaModel' | 'chUaPlatform' @@ -41,9 +42,11 @@ type StandardizedFeatures = | 'idleDetection' | 'keyboardMap' | 'magnetometer' + | 'mediasession' | 'microphone' | 'midi' | 'navigationOverride' + | 'otpCredentials' | 'payment' | 'pictureInPicture' | 'publickeyCredentialsGet' @@ -51,6 +54,7 @@ type StandardizedFeatures = | 'serial' | 'storageAccess' | 'syncXhr' + | 'tools' | 'usb' | 'webShare' | 'windowManagement' @@ -60,11 +64,20 @@ type StandardizedFeatures = * These features have been proposed, but the definitions have not yet been integrated into their respective specs. */ type ProposedFeatures = + | 'autofill' | 'clipboardRead' | 'clipboardWrite' + | 'deferredFetch' | 'gamepad' + | 'languageDetector' + | 'languageModel' + | 'manualText' + | 'rewriter' | 'sharedAutofill' | 'speakerSelection' + | 'summarizer' + | 'translator' + | 'writer' /** * These features generally have an explainer only, but may be available for experimentation by web developers. @@ -74,10 +87,12 @@ type ExperimentalFeatures = | 'browsingTopics' | 'capturedSurfaceControl' | 'conversionMeasurement' + | 'digitalCredentialsCreate' | 'digitalCredentialsGet' | 'focusWithoutUserActivation' | 'joinAdInterestGroup' | 'localFonts' + | 'monetization' | 'runAdAuction' | 'smartCard' | 'syncScript'