Audit tool

Generate a Permissions-Policy header in seconds.

Permissions-Policy tells the browser which powerful features (camera, microphone, payment, sensors, and more) are allowed for the current document and its nested frames. Pick a stance for every feature below, then copy the header or export the snippet for your hosting platform.

Feature policy

Each feature has three options. Block (none) forbids the feature for this document and every iframe; Allow self permits the same origin only; Allow * (any origin) permits the feature for every nested context, including third-party iframes.

Related reading

Background on the header and the broader baseline it sits next to.