Editing Apache Hardening (section)

== Permissions Policy ==
Permissions Policy (formerly known as Features Policy but using different syntax), is intended to set out what access your EPrints repository might need to certain peripherals / sensors / features your visitor's web browser might have access (e.g. webcam, microphone and geolocation).  EPrints repositories do not generally need access to any of these but if your repository was compromised (e.g. someone uploaded some JavaScript that would be executed if a user requested a certain page), it is sensible to explicitly specify access is not required, so these peripherals/data could not be misused.

The following line states that your EPrints repository does not need access to a visitor's computer's camera, geolocation or microphone.
 Header always set Permissions-Policy "camera=(), geolocation=(self 'HOST_URL'), microphone=()"
Make sure you update the '''HOST_URL''' with the primary hostname URL of your repository (e.g. ''https://example.eprints.org/'').  Like for Clickjacking protection line, this is best added to its own file under Apache's configuration directories, so it applies to all virtualhosts.  New peripherals, sensors and features continue to be added to the Permissions Policy.  The line above is only intended to cover the most significant.  You can build your own permissions policy at https://www.permissionspolicy.com/ and update the above line as appropriate.