// http header · security header

Permissions-Policy

Enable or disable browser features

What the Permissions-Policy header does

Permissions-Policy (formerly Feature-Policy) enables or disables powerful browser features per origin — camera, microphone, geolocation, and more. geolocation=() disables geolocation entirely, shrinking the page's attack surface.

Example

Permissions-Policy: geolocation=()

Where it's used

Permissions-Policy is a security header. Security headers tell the browser to turn on protections against common web attacks.

Other security headers