Working on header and CSP.

next.config.ts

@@ -30,13 +30,12 @@ function buildCSPHeader(): string {
 
 function buildPermissionsPolicy(): string {
     return Object.entries(PORTABASE_DEFAULT_SETTINGS.SECURITY.PERMISSIONS_POLICY)
-        .map(([feature, values]) => `${feature}=${values.join(", ")}`)
+        .map(([feature, values]) => `${feature.toLowerCase()}=${values.join(", ")}`)
         .join(", ");
 }
 
 
 
-
 const nextConfig: NextConfig = {
     output: "standalone",
     typescript: {
@@ -76,6 +75,10 @@ const nextConfig: NextConfig = {
                         key: 'Referrer-Policy',
                         value: 'strict-origin-when-cross-origin',
                     },
+                    {
+                        key: 'Strict-Transport-Security',
+                        value: 'max-age=63072000; includeSubDomains; preload',
+                    }
                     // ...other security headers
                 ],
             },