Closed MadCat34 closed 5 years ago
The HTTP Feature-Policy header provides a mechanism to allow and deny the use of browser features in its own frame, and in iframes that it embeds.
RFC is currently in Draft, but it could be interesting: https://w3c.github.io/webappsec-feature-policy/
Resolves #176
Thanks, @MadCat34!
The HTTP Feature-Policy header provides a mechanism to allow and deny the use of browser features in its own frame, and in iframes that it embeds.
RFC is currently in Draft, but it could be interesting: https://w3c.github.io/webappsec-feature-policy/