Remove FLoC header from Response library

* Ignore Laravel 9 security advisory in composer audit
* Ignore Laravel security issues during automated tests

---------

Co-authored-by: Bryan Nielsen <bryan@packettide.com>

Author: Houdini

.github/workflows/test.yml

@@ -53,7 +53,7 @@ jobs:
           mysqladmin -u root -proot password ''
 
       - name: Install Laravel
-        run: composer create-project laravel/laravel=^${{ matrix.laravel }} laravel --prefer-dist
+        run: composer create-project laravel/laravel=^${{ matrix.laravel }} laravel --prefer-dist --no-audit --no-security-blocking
 
       - name: Add local coilpack
         working-directory: laravel

CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## [Unreleased]
 
+### Changed
+
+- Removed FLoC header from Response library to mirror [upstream change](https://github.com/ExpressionEngine/ExpressionEngine/pull/2692)
+
 ## [2.1.0] - 2025-11-06
 
 ### Added

composer.json

@@ -56,6 +56,11 @@
     "allow-plugins": {
       "pestphp/pest-plugin": true,
       "phpstan/extension-installer": true
+    },
+    "audit": {
+        "ignore": {
+            "PKSA-8qx3-n5y5-vvnd": "Laravel 9 is no longer receiving security updates"
+        }
     }
   },
   "extra": {
@@ -68,4 +73,4 @@
       }
     }
   }
-}
+}

src/Response.php

@@ -102,11 +102,6 @@ public function fromOutput($status = 200, $headers = [])
             ee()->config->set_item('compress_output', true);
         }
 
-        // Send FLOC headers
-        if (REQ == 'PAGE' && ee()->config->item('enable_floc') !== 'y') {
-            ee()->output->set_header('Permissions-Policy: interest-cohort=()');
-        }
-
         // Parse query count
         if (REQ != 'CP') {
             $output = str_replace(LD.'total_queries'.RD, ee()->db->query_count, $output);