diff --git a/plugins/system/httpheaders/httpheaders.php b/plugins/system/httpheaders/httpheaders.php
index d02f52e6a93ff..72bad8a2ab8f2 100644
--- a/plugins/system/httpheaders/httpheaders.php
+++ b/plugins/system/httpheaders/httpheaders.php
@@ -79,6 +79,7 @@ class PlgSystemHttpHeaders extends CMSPlugin implements SubscriberInterface
 		'expect-ct',
 		'feature-policy',
 		'cross-origin-opener-policy',
+		'permissions-policy',
 	];
 
 	/**
diff --git a/plugins/system/httpheaders/httpheaders.xml b/plugins/system/httpheaders/httpheaders.xml
index 414760323160e..a44d3ed2b964a 100644
--- a/plugins/system/httpheaders/httpheaders.xml
+++ b/plugins/system/httpheaders/httpheaders.xml
@@ -72,14 +72,15 @@
 							validate="options"
 							class="col-md-4"
 							>
-							<option value="strict-transport-security">Strict-Transport-Security</option>
 							<option value="content-security-policy">Content-Security-Policy</option>
 							<option value="content-security-policy-report-only">Content-Security-Policy-Report-Only</option>
-							<option value="x-frame-options">X-Frame-Options</option>
-							<option value="referrer-policy">Referrer-Policy</option>
+							<option value="cross-origin-opener-policy">Cross-Origin-Opener-Policy</option>
 							<option value="expect-ct">Expect-CT</option>
 							<option value="feature-policy">Feature-Policy</option>
-							<option value="cross-origin-opener-policy">Cross-Origin-Opener-Policy</option>
+							<option value="permissions-policy">Permissions-Policy</option>
+							<option value="referrer-policy">Referrer-Policy</option>
+							<option value="strict-transport-security">Strict-Transport-Security</option>
+							<option value="x-frame-options">X-Frame-Options</option>
 						</field>
 						<field
 							name="value"