KKorrali Web

Security headers › Permissions-Policy

How to add the Permissions-Policy header in Netlify

Permissions-Policy turns browser features such as camera, microphone and geolocation on or off for your site and any embedded frames.

Netlify configuration (_headers file)

/*
  Permissions-Policy: camera=(), microphone=(), geolocation=()

Put the _headers file in your publish directory, or use a [[headers]] block in netlify.toml, then redeploy.

Before you deploy

Only disable features you do not use. List each feature your site needs with an allowlist such as camera=(self).

Verify it works

curl -sI https://your-site.com | grep -i permissions-policy

Or run a free Korrali Web scan to check this and every other security header at once.

Scan your site free

Other headers in Netlify