Permissions-Policy: allow geolocation=(self) on wizard /new

0c6e41e93140e67a8adccfa6f7d26d29e9db4ec4 · 2026-05-14 08:23:28 -0700 · SteveStudio2

Was blocking the wizard-2-business 'Use my location' button with
Chrome err.message 'Geolocation has been disabled in this document
by permissions policy.' Same-origin top-level only — mic/camera stay
denied. Flipped payment to (self) too so Stripe Payment Request
API stops console-warning.

Files touched

M server.js

Diff

commit 0c6e41e93140e67a8adccfa6f7d26d29e9db4ec4
Author: SteveStudio2 <stevestudio2@SteveStacStudio.lan>
Date:   Thu May 14 08:23:28 2026 -0700

    Permissions-Policy: allow geolocation=(self) on wizard /new
    
    Was blocking the wizard-2-business 'Use my location' button with
    Chrome err.message 'Geolocation has been disabled in this document
    by permissions policy.' Same-origin top-level only — mic/camera stay
    denied. Flipped payment to (self) too so Stripe Payment Request
    API stops console-warning.
---
 server.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server.js b/server.js
index 55de5d7..8820bd8 100644
--- a/server.js
+++ b/server.js
@@ -93,7 +93,7 @@ app.use(helmet({
   referrerPolicy: { policy: 'strict-origin-when-cross-origin' },
 }));
 app.use((req, res, next) => {
-  res.setHeader('Permissions-Policy', 'geolocation=(), microphone=(), camera=(), payment=()');
+  res.setHeader('Permissions-Policy', 'geolocation=(self), microphone=(), camera=(), payment=(self)');
   next();
 });

← 03e71d2 admin: /admin/status — live health snapshot UI · back to Butlr · owner-auth: accept token via X-Butlr-Owner-Token header + Be 89f3440 →