Permission Request Logger

WHAT IT DOES

Permission Request Logger scans the current page to detect and log all permission-related policies. It reads Permission Policy (formerly Feature Policy) directives, Content Security Policy (CSP) meta tags, and iframe permission policies. For each browser feature—geolocation, camera, microphone, notifications, fullscreen, USB, payment, autoplay, and many more—it shows whether the feature is allowed, denied, or restricted. It also logs full policy text, highlights restrictive policies that may break site functionality, and checks cross-origin isolation status.

WHERE IT RUNS

This tool runs as a userscript inside the BotGentz extension on any website. All policy detection happens locally in your browser—no external servers, no data sent anywhere. It works on any page, from simple sites to complex web applications.

HOW TO USE

Navigate to any page, open the panel, and click "Analyze Current Page." The tool will scan all policy sources on the page and display a summary of detected features and their status. Each entry shows the feature name and whether it is allowed or denied. Toggle settings to show full policy text, automatically analyze on page load, highlight restrictions, or show iframe policies. Use the "Copy Full Report" button to export all findings to your clipboard for documentation or debugging.

TECHNICAL MECHANISM

The tool reads policies from multiple sources. It checks meta tags for permissions-policy, feature-policy, and content-security-policy. It uses the Feature Policy API (document.featurePolicy) when available to get a list of all features and their allowed status. It parses iframe allow attributes and sandbox flags to report embedded frame restrictions. It also detects Cross-Origin Embedder Policy and Cross-Origin Opener Policy meta tags for cross-origin isolation status. The tool then displays these findings in a clear, readable format, with color-coded statuses for easy scanning.

THE PANEL

The panel can be dragged anywhere on screen, snapped to the edge, resized, collapsed, and closed with Escape. It remembers its position per site and stays out of your way until you need it.

PLEASE NOTE

This tool requires the free BotGentz extension to run. Policy detection depends on what the browser exposes—some policies are server-side only and cannot be read from the page. Sites change frequently; if the tool stops working on a particular site, it may need updating. All processing is local—no data is collected or transmitted.