KKorrali Web

Security headers › Permissions-Policy

How to add the Permissions-Policy header in Nginx

Permissions-Policy turns browser features such as camera, microphone and geolocation on or off for your site and any embedded frames.

Nginx configuration (nginx server block)

add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;

Place it in the server or location block, then run nginx -t and reload. add_header in a location block replaces headers set at server level, so repeat them where needed. The always flag sends the header on error responses too.

Before you deploy

Only disable features you do not use. List each feature your site needs with an allowlist such as camera=(self).

Verify it works

curl -sI https://your-site.com | grep -i permissions-policy

Or run a free Korrali Web scan to check this and every other security header at once.

Scan your site free

Other headers in Nginx