Feature-Policy HTTP Header
Feature permissions are seperated by a semi-colon. Each feature has a name and a list of allowed origins, each seperated by a space.
Control access to accelerometer.accelerometer=<feature>
Control access to ambient light sensor.ambient-light-sensor=<feature>
Allow access to autoplay media.autoplay=<feature>
Control access to battery API.battery=<feature>
Control access to camera.camera=<feature>
Control access to clipboard reading.clipboard-read=<feature>
Control access to clipboard writing.clipboard-write=<feature>
Control access to display capture devices.display-capture=<feature>
Control whether page can set document.domain.document-domain=<feature>
Control access to encrypted media extensions API.encrypted-media=<feature>
Control if tasks should execute in a frame if hidden.execution-while-not-rendered=<feature>
Control if tasks should execute if frame is out of viewport.execution-while-out-of-viewport=<feature>
Control access to fullscreen API.fullscreen=<feature>
Control access to gamepad API.gamepad=<feature>
Control access to geo location API.geolocation=<feature>
Control access to gyroscope API.gyroscope=<feature>
Control whether page can show layout animations.layout-animations=<feature>
Control access to legacy image formats.legacy-image-formats=<feature>
Control access to magnetometer API.magnetometer=<feature>
Control access to microphone device.microphone=<feature>
Control access to MIDI API.midi=<feature>
Control access to page spatial navigation.navigation-override=<feature>
Control download and display of large images.oversized-images=<feature>
Control access to payment request API.payment=<feature>
Control access to picture-in-picture mode.picture-in-picture=<feature>
Control access to web authentication API.publickey-credentials-get=<feature>
Control access to screen wake lock API.screen-wake-lock=<feature>
Control access to the speaker.speaker=<feature>
Control access to speaker selection API.speaker-selection=<feature>
Control access to XMLHttpRequests.sync-xhr=<feature>
Control access to web USB API.usb=<feature>
Control access to WebVR API.vr=<feature>
Control access to Navigator.share API.web-share=<feature>
Control access to WebXR API.xr-spatial-tracking=<feature>
- Allowed on this page and all nested contexts of any origin.
- Allowed on this page and all nested contexts in the same origin.
- Allowed in this frame as long as the page is from the same origin.
- Feature is disabled.
- Allowed on this origin.