Permissions-Policy: attribution-reporting

The HTTP Permissions-Policy header attribution-reporting directive controls whether the current document is allowed to use the Attribution Reporting API.

Specifically, where a defined policy blocks the use of this feature:

• Background attributionsrc requests won't be made.
• The XMLHttpRequest.setAttributionReporting() method will throw an exception when called.
• The attributionReporting option, when included on a fetch() call, will cause it to throw an exception.
• Registration headers (Attribution-Reporting-Register-Source and Attribution-Reporting-Register-Trigger) in HTTP responses on associated documents will be ignored.

Permissions-Policy: attribution-reporting=<allowlist>;