Skip to content

Feature-Policy should be called Permissions-Policy now, having a bit different syntax #22792

Open

Description

Is your feature request related to a problem? Please describe.

Permissions Policy, W3C Working Draft, 16 July 2020 specifies that Feature-Policy is now called Permissions Policy.

If Nextcloud implements these headers they should be kept up to date.

Describe the solution you'd like

At

$this->headers['Feature-Policy'] = $this->getFeaturePolicy()->buildPolicy();

Permissions-Policy should be generated instead of Feature-Policy.
Permissions-Policy has slightly different syntax.

Describe alternatives you've considered

Both Permissions-Policy and Feature-Policy are generated.

Additional context

securityheaders.com post on the topic - Goodbye Feature Policy and hello Permissions Policy!

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions