// http header · security header
Permissions-Policy
Enable or disable browser features
What the Permissions-Policy header does
Permissions-Policy (formerly Feature-Policy) enables or disables powerful browser features per origin — camera, microphone, geolocation, and more. geolocation=() disables geolocation entirely, shrinking the page's attack surface.
Example
Permissions-Policy: geolocation=()Where it's used
Permissions-Policy is a security header. Security headers tell the browser to turn on protections against common web attacks.