Add a Permissions-Policy on WordPress
Why it matters
Without one, any script on your pages, including injected or third-party code, can ask visitors for the camera, microphone, location and similar features. Turning off what you do not use limits what such code can request.
Staged change. Do this in stages and check each one before the next, so a mistake does not break your site or your mail.
The fix
- Check which features plugins use (store locators, payment buttons, video chat) before turning them off.
- Set the header at the CDN or server, with a security-headers plugin, or with a send_headers must-use plugin like the other header fixes, then test those pages.
Related
Scan your domain to see whether this applies to you.