The geolocation policy controls whether the current document is allowed to use the Geolocation interface. If disabled in any document, calls to both getCurrentPosition and watchPosition must result in the error callback being invoked with PERMISSION_DENIED.

How to apply this policy

Send the following HTTP header to control the geolocation policy, and disallow it on all origins:

Feature-Policy: geolocation 'none'

Does it work?

Currently Firefox, and Chromium based browsers, such as Google Chrome, Samsung Internet, and Opera, are the only user-agents to support Feature Policy. The minimum version that correctly recognises the geolocation policy is:

Mozilla Firefox


Google Chrome


Microsoft Edge

Not supported

Apple Safari

Not supported