Header Security

Shopify Permissions-Policy Header Check

The Permissions-Policy header controls browser features (camera, microphone, geolocation) on your Shopify store. Check its configuration to protect your customers' privacy.

What this test checks

This test checks whether the Permissions-Policy header is present on your Shopify store. This header allows you to limit the use of browser features (camera, microphone, geolocation) by your site, protecting customer privacy against potential abuse.

Our recommendation

Add the Permissions-Policy header with a restrictive policy, like 'geolocation=(), microphone=(), camera=()'. Use Shopify's built‑in security settings to configure this header. Test your configuration with browser developer tools.

Security tests

View all tests

CMS Security

Shopify Permissions-Policy Header Check

What this test checks

Our recommendation

Read more

Shopify Cart Endpoint Exposure Check

Referrer-Policy Header Check

PrestaShop Admin Access Restriction Check

Shopify X-Content-Type-Options Header Check

Shopify Admin CAPTCHA Protection Check

Shopify HTTPS Redirect Check

PrestaShop Admin Access Check

Upload Folder Indexing Check

Information Leak via HTTP Headers Check

PrestaShop Version Check

Shopify Upload Folder Security Check

WordPress Backup File Exposure Check

Shopify Terms and Conditions (T&C) Presence Check

Joomla Temporary Folder (/tmp/) Access Check

Magento Admin Access Restriction Check

SSL Certificate Check

Login Attempt Limiting Check

Joomla Upload Folder Indexing Check (images/)

Shopify Content-Security-Policy Header Check

Email Address Exposure Check

WordPress Debug Log Exposure Check

Drupal Log File Exposure Check

PrestaShop Upload Folder Indexing Check

Clear-Site-Data Header Check

Joomla Backup File Exposure Check

Drupal Upload Folder Indexing Check (sites/default/files/)

CAPTCHA Presence on Admin Page Check

Shopify HSTS Header Check

Magento Configuration File Exposure Check

WordPress Theme Editor Access Check

Shopify Registration CAPTCHA Protection Check

Cookie Policy Page Presence Check

Shopify API Key Exposure Check

X-Content-Type-Options: nosniff Header Check

Shopify Contact Form CAPTCHA Protection Check

Privacy Policy Page Presence Check

API Key Exposure Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Joomla Log File Exposure Check

Plaintext Password Exposure Check

Cross-Origin-Resource-Policy Header Check

Magento Version Check

Cross-Origin-Embedder-Policy Header Check

Drupal Admin Login Page Protection Check

Server Status Pages Access Check

Shopify Password Protection Check

Drupal Admin Access Check

Joomla Cron Access Check

Magento Log File Exposure Check

SQL Query Exposure Check

xmlrpc.php Access Check

wp-config.php File Access Check

PHP Error Display in Production Check

Database Administration Tools Access Check

PrestaShop Session Cookie Security Check

Shopify X-Frame-Options Header Check

PHP Error Display on Magento Check

Access to wp-cron.php Check

Drupal Temporary Folder (tmp/) Access Check

Magento env.php File Access Check

Magento Admin Access Check

CORS Configuration Check (Access-Control-Allow-Origin)

WordPress Admin Access Check

Magento Git File Exposure Check

CAPTCHA Presence on Client Login Page Check

Index File Presence in Upload Folders Check

WordPress Version Check

Magento Cache Folder Access Check

Content-Security-Policy Header Check

Authentication File Exposure Check (.htpasswd, .user.ini)

Shopify SSL/TLS Configuration Check

Shopify Log File Exposure Check

PHP Error Display on WordPress Check

PrestaShop Log File Exposure Check

Upload Folder Protection Check (.htaccess, index.html files)

PrestaShop parameters.php File Access Check