snag.page

Every check ยท Headers

Permissions-Policy

headers/permissions-policy

What it checks

The Permissions-Policy header.

Why it matters

It stops embedded content asking for the camera, microphone, location and the rest the site never uses.

How to fix it

  1. Send a Permissions-Policy turning off what the site never uses.
Header
Permissions-Policy: camera=(), microphone=(), geolocation=()

Check a site for this and everything else: snag.page. More on headers: Bot challenge Content-Security-Policy Framing nosniff Referrer policy Software versions End-of-life software CORS Cross-Origin-Opener-Policy