Permissions-Policy Analyzer
Paste a Permissions-Policy value, header line, or full HTTP response headers to review feature allowlists, wildcard access, duplicates, and clear syntax concerns. Analysis runs entirely in your browser and does not contact the referenced site.
Parse pasted Permissions-Policy text locally and review feature directives, allowlists, duplicates, unknown feature names, and malformed syntax.
How to analyze Permissions-Policy
- Paste a policy value, header line, or full HTTP response header block.
- Review parsed feature directives and allowlists.
- Inspect errors for malformed syntax and reviews for duplicates, unknown features, or wildcard access.
What the analyzer checks
The parser supports *, empty (), self, and parenthesized token or origin lists, and uses a built-in list of known feature names.
Malformed directives and allowlists are errors; repeated features, wildcard allowlists, and repeated Permissions-Policy headers are review conditions.
Privacy and limitations
Only pasted policy text is analyzed in your browser. The tool does not inspect iframe allow attributes, document inheritance, real origin relationships, browser-version support, or live page behavior.
Permissions-Policy Analyzer FAQ
Does it fetch the site header?
No. Paste the policy manually.
What allowlists are supported?
*, (), self, and supported parenthesized lists.
Are unknown features always invalid?
No. They are marked for review.
Does it test iframe permissions?
No. Live document context is not inspected.
Is the policy uploaded?
No. Processing is browser-local.