Permissions-Policy
The Permissions-Policy header defines whether particular browser functions, in this case Web Monetization, are allowed within its own frame or within any iframe elements in the document.
The basic syntax is as follows:
Permissions-Policy: <directive> <allowlist>
<directive> is the function that is enabled for a given <allowlist>, which is a list of origins. The default <allowlist> is 'self', which allows monetization in the document and in all nested browsing contexts(iframes) in the same origin.
Directives
Controls whether the current document is allowed to use the Web Monetization API.
Example
Permissions-Policy: monetization=(self)