Request to add `Permissions-Policy` header about helmet HOT 2 CLOSED

Permissions-Policy is still in a draft state. It's also unsupported in Firefox or Safari, so I'm hesitant to add it.

For now, here are some options:

• Write a very simple middleware yourself. Here's an example:

  app.use((req, res, next) => {
    res.setHeader(
      "Permissions-Policy",
      "geolocation=(), interest-cohort=()"
    );
    next();
  });

• Install the permissions-policy package. This package is not maintained by me but is a fork of a Helmet module and I have contributed a few changes.

Would that work for you?

from helmet.

That'll do

from helmet.