webzod
account

Replace Feature-Policy with Permissions-Policy

headers.permissions.legacy_only · effort: minutes

Why it matters

Feature-Policy was renamed Permissions-Policy; only Chromium still reads the old header, and only until it is removed. The new header has a different syntax, so rewrite it rather than rename it.

Staged change. Do this in stages and check each one before the next, so a mistake does not break your site or your mail.

The fix

  1. Translate each entry: camera 'none' becomes camera=(), geolocation 'self' becomes geolocation=(self), an origin list becomes geolocation=(self "https://maps.example"). Separate entries with commas, not semicolons.
  2. Send Permissions-Policy where Feature-Policy is set today, test the pages that use those features, then remove Feature-Policy.
text 
# before
Feature-Policy: camera 'none'; geolocation 'self'
# after
Permissions-Policy: camera=(), geolocation=(self)

Read the documentation (opens in a new tab)

Related

Scan your domain to see whether this applies to you.