Agent Wranglers

Security Recommended

Switch off browser features you don't use

Use Permissions-Policy to turn off every browser feature the site does not use. Allow the rest only for your own origin.

By Erik Bergstedt, Agent Wranglers. Updated .

How to do it

List each feature you don't use as feature=(). Allow the ones you use for self only, for example clipboard-write=(self).

Example

Permissions-Policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), clipboard-write=(self)

How to check

The header is present. Features you use still work.

For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers website playbook: https://agentwranglers.se/playbook/website/security/permissions-policy.