snag.page

github.com · Headers

No Permissions-Policy

Worth doing Checked 15 Nov 2026, 19:33 UTC

Nothing limits what embedded content may ask for, such as the camera, microphone or location.

  1. Send the header below, turning off what the site never uses.
Header
Permissions-Policy: camera=(), microphone=(), geolocation=()

What it checks

The Permissions-Policy header.

Why it matters

It stops embedded content asking for the camera, microphone, location and the rest the site never uses.

Everything to fix on github.com · About this check