Permissions-Policy

Checks for Permissions-Policy (Feature-Policy) header


Rule ID	`security/permissions-policy`
Category	Security
Scope	Site-wide
Severity	info
Weight	2/10

Solution

Permissions-Policy controls which browser features your site can use (camera, microphone, geolocation, etc.). This limits what embedded iframes can access. Example: Permissions-Policy: camera=(), microphone=(), geolocation=(). Empty parentheses disable the feature entirely. This is especially important if you embed third-party content.

Enable / Disable

Disable this rule

squirrel.toml

toml

[rules]
disable = ["security/permissions-policy"]

Disable all Security rules

squirrel.toml

toml

[rules]
disable = ["security/*"]

Enable only this rule

squirrel.toml

toml

[rules]
enable = ["security/permissions-policy"]
disable = ["*"]

Edit this page