w3c/webappsec-feature-policy

A mechanism to selectively enable and disable browser features and APIs

430

stars

537

commits

Bikeshed

primary language

Jun 18, 2026

updated

w3c.github.io/webappsec-permissions-policy/

README

Permissions Policy (previously named Feature Policy)

A web platform API which gives a website the ability to allow and deny the use of browser features in its own frame, and in iframes that it embeds. Examples of features that could be controlled by permissions policy include:

  • getUserMedia (Camera, Microphone, and Speaker-selection)
  • Fullscreen
  • Geolocation
  • MIDI
  • Payments
  • Synchronous XHR
  • ...

See also: how to integrate a web platform feature with permissions policy.

The Permissions Policy spec is hosted on this repo, at https://w3c.github.io/webappsec-permissions-policy/

For more explanation, use cases, examples, etc., please refer to the explainer document.

Where is Document Policy?

Document Policy, which was previously hosted here, has been moved to WICG; it can be found at https://github.com/WICG/document-policy/.

Questions, suggestions? Please open an issue or send a pull request!

Contributors

(top 30 of 65)

clelland

252 commits

igrigorik

52 commits

arichiv

49 commits

Malvoz

24 commits

w3c/webappsec-feature-policy

A mechanism to selectively enable and disable browser features and APIs

430

stars

537

commits

Bikeshed

primary language

Jun 18, 2026

updated

w3c.github.io/webappsec-permissions-policy/

README

Permissions Policy (previously named Feature Policy)

A web platform API which gives a website the ability to allow and deny the use of browser features in its own frame, and in iframes that it embeds. Examples of features that could be controlled by permissions policy include:

  • getUserMedia (Camera, Microphone, and Speaker-selection)
  • Fullscreen
  • Geolocation
  • MIDI
  • Payments
  • Synchronous XHR
  • ...

See also: how to integrate a web platform feature with permissions policy.

The Permissions Policy spec is hosted on this repo, at https://w3c.github.io/webappsec-permissions-policy/

For more explanation, use cases, examples, etc., please refer to the explainer document.

Where is Document Policy?

Document Policy, which was previously hosted here, has been moved to WICG; it can be found at https://github.com/WICG/document-policy/.

Questions, suggestions? Please open an issue or send a pull request!

Contributors

(top 30 of 65)

clelland

252 commits

igrigorik

52 commits

arichiv

49 commits

Malvoz

24 commits

Languages

Bikeshed

99.4%