Permissions-Policy header
Permissions-Policy (formerly Feature-Policy) controls which browser features can be used on your page and in embedded content.
Want the result for your own site? Free Security Headers Checker — paste your domain, get the report.
Why It Matters
Malicious iframes or scripts might try to access sensitive features like camera, microphone, or geolocation. Permissions-Policy restricts these capabilities.
How We Check
We analyze your Permissions-Policy header for restrictions on sensitive features like camera, microphone, geolocation, and payment APIs.
How to Fix
Add a Permissions-Policy header disabling unused features: Permissions-Policy: camera=(), microphone=(), geolocation=(self).
Frequently Asked Questions
What is Permissions-Policy header?
Permissions-Policy (formerly Feature-Policy) controls which browser features can be used on your page and in embedded content.
Why does Permissions-Policy header matter for website security?
Malicious iframes or scripts might try to access sensitive features like camera, microphone, or geolocation. Permissions-Policy restricts these capabilities.
How do I fix Permissions-Policy header issues?
Add a Permissions-Policy header disabling unused features: Permissions-Policy: camera=(), microphone=(), geolocation=(self).
Related Security Checks
Related Tool
Security Headers Checker
Run all 10 related checks with our free security headers checker
Check Your Website Now
Run a free security scan to check for Permissions-Policy header issues and 62+ other security vulnerabilities.
Scan Your Website Free