Description

The Permissions-Policy header allows developers to selectively enable and disable use of various browser features and APIs.

Remediation

References

Permissions-Policy / Feature-Policy (MDN)

Permissions Policy (W3C)

Related Vulnerabilities

PHP register_globals enabled

TLS/SSL LOGJAM attack

Web Cache Poisoning via JSONP and UTM_ parameter

ASP.NET ValidateRequest globally disabled

JBoss ServerInfo MBean

Severity

Info

Classification

CWE-1021 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N

Tags

Configuration