Web Tools tools.bryantsmith.com

Creative Workflow Helpers

Permissions Policy Builder

Start from the setup that matches your site, then copy a ready-to-ship Permissions-Policy header that controls which browser features (camera, geolocation, autoplay and more) each origin may use. Every feature is explained — nothing leaves your browser.

Runs in your browser v1.0.0

1. Pick a starting point

start here

Choose the situation that matches your site. The header and its explanation update immediately — no account, no server.

2. Generated header

live 



                    

                        

                            
                            
                        

                    


                    


                    

                        
                        
                        
                        
                    


                    

                

            


            

                

                    
What each feature does

                

                

                    
    
                
    
            
    
        
    

        
    
            
                3. Advanced: choose features
                optional
            
            
    
                
    
                    Leave a feature as Browser default to omit it. () blocks
                    it, (self) allows only your own origin, * allows every
                    origin, and Custom origins takes a space-separated list such as
                    self https://example.com.
                
    

                
    
                    
                    
                
    

                
    

                
    
                    
    
                        
                        
                    
    
                    
    
                        
                    
    
                    
    
                
    
            
    
        
    
    
    

    
    
        
    
            
    How it works
    
        
    
        
    
            
    
                Permissions Policy replaces Feature Policy and lets a document declare which browser
                features an origin (and any nested frames) may use through the
                Permissions-Policy response header. Pick a preset to load a known-good
                starting point, then fine-tune features under Advanced. Every allowlist is
                validated locally — unknown origins and combining * with other values are
                reported instead of silently emitted. The current setup is written to the URL fragment so it
                can be bookmarked or shared, and no input is ever sent to a server.
            
    
        
    
    
    

    

    Related tools
    • Cookie Builder & InspectorBuild a Set-Cookie header or paste one to inspect its expiry, path, domain, Secure, HttpOnly and SameSite attributes — entirely in your browser.
    • CORS Header Builder & ExplainerModel a cross-origin request and get the exact CORS response headers to send, explained in plain language.
    • CSP AnalyzerPaste a Content-Security-Policy to flag risky, redundant, contradictory, and commonly misunderstood directives — entirely in your browser.
    • .env Compare & MergeCompare development, staging, and production .env key sets without exposing secret values, then build a merged template.
    • Accessible Name CalculatorPaste HTML, pick an element, and see the accessible name assistive technology computes — entirely in your browser.
    • Apache Rewrite TesterTest Apache mod_rewrite rules against a sample request path and see the rewritten URL, redirects, captures and warnings.
    More Creative Workflow Helpers tools