Skip to content
Security·Intermediate·Conceptual·1 min read

What does Permissions-Policy control?

Short interview answer

It allows or denies access to powerful browser features — camera, microphone, geolocation, and others — per origin and per frame. Disabling features the site never uses means a compromise or a misbehaving third-party frame can't invoke them.

Key takeaway

Explain the underlying mental model clearly, then support it with a concrete example and its trade-offs.

← Back to Content Security Policy and security headers

Related questions