diff --git a/src/Header.php b/src/Header.php
index e51b87c31a..676bd75bfd 100644
--- a/src/Header.php
+++ b/src/Header.php
@@ -371,7 +371,7 @@ class Header
          *
          * @see https://developer.mozilla.org/docs/Web/HTTP/Headers/Permissions-Policy
          */
-        $headers['Permissions-Policy'] = 'fullscreen=(self), oversized-images=(self), interest-cohort=()';
+        $headers['Permissions-Policy'] = 'fullscreen=(self), interest-cohort=()';
 
         $headers = array_merge($headers, Core::getNoCacheHeaders());
 
diff --git a/tests/unit/HeaderTest.php b/tests/unit/HeaderTest.php
index 902821f1b0..7615b7cefd 100644
--- a/tests/unit/HeaderTest.php
+++ b/tests/unit/HeaderTest.php
@@ -192,7 +192,7 @@ class HeaderTest extends AbstractTestCase
             'X-Content-Type-Options' => 'nosniff',
             'X-Permitted-Cross-Domain-Policies' => 'none',
             'X-Robots-Tag' => 'noindex, nofollow',
-            'Permissions-Policy' => 'fullscreen=(self), oversized-images=(self), interest-cohort=()',
+            'Permissions-Policy' => 'fullscreen=(self), interest-cohort=()',
             'Expires' => $date,
             'Cache-Control' => 'no-store, no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0',
             'Pragma' => 'no-cache',