Consider adding Feature-Policy header

[jelly]

The Feature-Policy disallows the browser from accessing certain features on a mobile device such as location, etc and is currently still a draft. It's also only supported via a Django extension.

https://pypi.org/project/django-feature-policy/ https://w3c.github.io/webappsec-feature-policy/