Permissions-Policy: sync-xhr=* Feature-Policy: sync-xhr 'none'