[dalf]

There is the Feature-Policy header too : allow and deny the use of browser features in its own frame. I've seen this header on a bank website.

Example :

  Feature-Policy: accelerometer 'none'; autoplay 'none'; camera 'none'; fullscreen 'none'

Documentation: https://developer.mozilla.org/en-US/docs/Web/HTTP/Feature_Po...