Audit rules
Permissions Policy Missing
The response has no Permissions-Policy header, which limits the browser features (camera, geolocation and others) the page and its frames may use. In a QuikSEO audit, a failure of this rule has info severity and counts against the score. Below are the exact condition, its exceptions and the sources behind it, followed by the other rules of the same group.
security.permissions_policyInfo01 — Definition
How This Rule Is Checked
The rule is a pure function of the fetched page: no extra requests, no account settings. The same input always gives the same result.
Rule Severity and Score
- Rule id
security.permissions_policy- Group
- Security
- Severity of a failure
- Info
- Counts in the score
- Yes, whenever it applies to the page
- Required for a score
- No
Condition and Exceptions
- Condition
- No Permissions-Policy header → review
- Exceptions
- HTML mode → not_checked
Sources and Project Decision
- Sources
- Permissions Policy (W3C Working Draft) (W3C, Q11)
- Project decision
- Review only (lot 2): the specification is a W3C Working Draft, and a page that uses no powerful browser feature may not need a policy.
02 — Security
Other Rules in This Group
The other checks of the same group, each with its own condition and sources.
- X-Content-Type-Options Missingsecurity.content_type_options
- Content Security Policy Missingsecurity.csp
- Framing Protection Missingsecurity.frame_protection
- HSTS Missingsecurity.hsts
- Referrer Policy Missingsecurity.referrer_policy
- Flagged by Safe Browsingsecurity.safe_browsing
- Form Submits Over HTTPsecurity.unsafe_forms