Web Security · Middle · Question 71 of 75

What is `Permissions-Policy` used for?

1Setting user roles on the server
2Allowing scripts from other origins
✓Correct answer: Turning off powerful browser features like camera, geolocation or payment for the page and its iframes

Explanation

For example Permissions-Policy: camera=(), geolocation=() means even injected code or embedded ads can't request those features.

Further reading

MDN: Permissions-Policy ↗

Test yourself

Take the Web Security · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.