How to test your site against security headers: https://securityheaders.com/

Permissions policy

https://www.w3.org/TR/permissions-policy-1/