Permissions Policy


NOTE: Since the Feature-Policy header was deprecated I've decided to adapt the old Evan Hahn Permissions-Policy repository, this project was entirely built on top of his work.

This is a Express middleware to set the Permissions-Policy header. You can read more about it here.

To use:

``javascript
const permissionsPolicy = require("permissions-policy");

// ...

app.use(
permissionsPolicy({
features: {
fullscreen: ["self"], // fullscreen=()
vibrate: ["none"], // vibrate=(none)
payment: ["self", '"example.com"'], // payment=(self "example.com")
syncXhr: [], // syncXhr=()
},
})
);
`

The following features are currently supported:

- accelerometer
- ambientLightSensor
- autoplay
- battery
- camera
- displayCapture
- documentDomain
- documentWrite
- encryptedMedia
- executionWhileNotRendered
- executionWhileOutOfViewport
- fontDisplayLateSwap
- fullscreen
- geolocation
- gyroscope
- interestCohort
- layoutAnimations
- legacyImageFormats
- loadingFrameDefaultEager
- magnetometer
- microphone
- midi
- navigationOverride
- notifications
- oversizedImages
- payment
- pictureInPicture
- publickeyCredentials
- push
- serial
- speaker
- syncScript
- syncXhr
- unoptimizedImages
- unoptimizedLosslessImages
- unoptimizedLossyImages
- unsizedMedia
- usb
- verticalScroll
- vibrate
- vr
- wakeLock
- xr
- xrSpatialTracking`