feature-policy

WebJar for feature-policy

License	MIT
GroupId	org.webjars.npm
ArtifactId	feature-policy
Last Version	0.3.0
Release Date	Jul 9, 2019
Type	jar
Description	feature-policy WebJar for feature-policy
Project URL	http://webjars.org
Source Code Management	https://github.com/helmetjs/feature-policy

Download feature-policy

Filename	Size
feature-policy-0.3.0.pom
feature-policy-0.3.0.jar	7 KB
feature-policy-0.3.0-sources.jar	22 bytes
feature-policy-0.3.0-javadoc.jar	22 bytes

How to add to project

Apache Maven

<!-- https://jarcasting.com/artifacts/org.webjars.npm/feature-policy/ -->
<dependency>
    <groupId>org.webjars.npm</groupId>
    <artifactId>feature-policy</artifactId>
    <version>0.3.0</version>
</dependency>

Gradle Groovy

// https://jarcasting.com/artifacts/org.webjars.npm/feature-policy/
implementation 'org.webjars.npm:feature-policy:0.3.0'

Gradle Kotlin

// https://jarcasting.com/artifacts/org.webjars.npm/feature-policy/
implementation ("org.webjars.npm:feature-policy:0.3.0")

Apache Buildr

'org.webjars.npm:feature-policy:jar:0.3.0'

Apache Ivy

<dependency org="org.webjars.npm" name="feature-policy" rev="0.3.0">
  <artifact name="feature-policy" type="jar" />
</dependency>

Groovy Grape

@Grapes(
@Grab(group='org.webjars.npm', module='feature-policy', version='0.3.0')
)

Scala SBT

libraryDependencies += "org.webjars.npm" % "feature-policy" % "0.3.0"

Leiningen

[org.webjars.npm/feature-policy "0.3.0"]

Dependencies

There are no dependencies for this project. It is a standalone project that does not depend on any other jars.

Project Modules

There are no modules declared in this project.

Feature Policy

NOTE: The Feature-Policy header has been deprecated by browsers in favor of Permissions-Policy. This module will still be supported but no new features will be added.

This is Express middleware to set the Feature-Policy header. You can read more about it here and here.

To use:

const featurePolicy = require('feature-policy')

// ...

app.use(featurePolicy({
  features: {
    fullscreen: ["'self'"],
    vibrate: ["'none'"],
    payment: ['example.com'],
    syncXhr: ["'none'"]
  }
}))

The following features are currently supported:

• accelerometer
• ambientLightSensor
• autoplay
• battery
• camera
• displayCapture
• documentDomain
• documentWrite
• encryptedMedia
• executionWhileNotRendered
• executionWhileOutOfViewport
• fontDisplayLateSwap
• fullscreen
• geolocation
• gyroscope
• layoutAnimations
• legacyImageFormats
• loadingFrameDefaultEager
• magnetometer
• microphone
• midi
• navigationOverride
• notifications
• oversizedImages
• payment
• pictureInPicture
• publickeyCredentials
• push
• serial
• speaker
• syncScript
• syncXhr
• unoptimizedImages
• unoptimizedLosslessImages
• unoptimizedLossyImages
• unsizedMedia
• usb
• verticalScroll
• vibrate
• vr
• wakeLock
• xr
• xrSpatialTracking

Helmet

Express.js security with HTTP headers

Versions

Version
0.3.0 Jul 9, 2019