Skip to content
Ulrich Berntien edited this page Aug 17, 2020 · 1 revision

TWA-0220

Message

"Feature-Policy missing"

Explanation

The Feature-Policy could be sent from the web server to the web browser in the HTTP response header.

The Feature-Policy limits the feature of the web browser for the current web page if the web browser already support the Feature-Policy header.

E.g. usage of microphone could be disabled in the web server configuration for all web pages by a Feature-Policy: microphone 'none'.

Remediation

Include a Feature-Policy setting in the web server configuration. Chooses the strongest directives possible for your web application. Switch off all not needed features.

See

Clone this wiki locally