`Permissions-Policy`

Which browser features a page may use.

Response header (sent by servers) security

How it works

Disables camera, microphone, geolocation and similar features that a page does not need.

Example

Permissions-Policy: camera=(), geolocation=()

See it live: send any request in Endpoint Client and open the Headers tab, where every response header is explained. Specification: W3C Permissions Policy.

Related headers

`Content-Security-Policy`

Restricts what a browser page may load and run.

`Cross-Origin-Resource-Policy`

Which origins may embed this resource.

`Referrer-Policy`

How much of the current URL browsers send as Referer.

`Strict-Transport-Security`

Tells browsers to use HTTPS only for this host.

`X-Content-Type-Options`

Stops browsers from guessing the content type.

`X-Frame-Options`

Whether the page may be shown in a frame.