Nosecone: Permission-Policy

[blaine-arcjet]

Via @davidmytton

We probably want to support the Permission-Policy header in Nosecone. However, we want to make sure that it doesn't generate a ton of warnings for our users to try to understand.

For example:

By default next-safe set permissionsPolicy as follows:

feature-policy: clipboard-read 'none';clipboard-write 'none';gamepad 'none';speaker-selection 'none';accelerometer 'none';ambient-light-sensor 'none';autoplay 'none';battery 'none';camera 'none';cross-origin-isolated 'none';display-capture 'none';document-domain 'none';encrypted-media 'none';execution-while-not-rendered 'none';execution-while-out-of-viewport 'none';fullscreen 'none';geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';navigation-override 'none';payment 'none';picture-in-picture 'none';publickey-credentials-get 'none';screen-wake-lock 'none';sync-xhr 'none';usb 'none';web-share 'none';xr-spatial-tracking 'none';
permissions-policy: clipboard-read=(),clipboard-write=(),gamepad=(),speaker-selection=(),accelerometer=(),ambient-light-sensor=(),autoplay=(),battery=(),camera=(),cross-origin-isolated=(),display-capture=(),document-domain=(),encrypted-media=(),execution-while-not-rendered=(),execution-while-out-of-viewport=(),fullscreen=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),navigation-override=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),screen-wake-lock=(),sync-xhr=(),usb=(),web-share=(),xr-spatial-tracking=()

This generated the following errors in the Chrome console:

Error with Feature-Policy header: Unrecognized feature: 'speaker-selection'.
Error with Feature-Policy header: Unrecognized feature: 'ambient-light-sensor'.
Error with Feature-Policy header: Unrecognized feature: 'battery'.
Error with Feature-Policy header: Unrecognized feature: 'document-domain'.
Error with Feature-Policy header: Unrecognized feature: 'execution-while-not-rendered'.
Error with Feature-Policy header: Unrecognized feature: 'execution-while-out-of-viewport'.
Error with Feature-Policy header: Unrecognized feature: 'navigation-override'.
Error with Feature-Policy header: Some features are specified in both Feature-Policy and Permissions-Policy header: clipboard-read, clipboard-write, gamepad, accelerometer, autoplay, camera, cross-origin-isolated, display-capture, encrypted-media, fullscreen, geolocation, gyroscope, magnetometer, microphone, midi, payment, picture-in-picture, publickey-credentials-get, screen-wake-lock, sync-xhr, usb, web-share, xr-spatial-tracking. Values defined in Permissions-Policy header will be used.
Error with Permissions-Policy header: Unrecognized feature: 'speaker-selection'.
Error with Permissions-Policy header: Unrecognized feature: 'ambient-light-sensor'.
Error with Permissions-Policy header: Unrecognized feature: 'battery'.
Error with Permissions-Policy header: Unrecognized feature: 'document-domain'.
Error with Permissions-Policy header: Unrecognized feature: 'execution-while-not-rendered'.
Error with Permissions-Policy header: Unrecognized feature: 'execution-while-out-of-viewport'.
Error with Permissions-Policy header: Unrecognized feature: 'navigation-override'.

[blaine-arcjet]

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy#directives