Cross-Origin Resource Policy (CORP)

[xiaotiandada]

• https://developer.mozilla.org/en-US/docs/Web/HTTP/Cross-Origin_Resource_Policy_(CORP)
• https://web.dev/coop-coep/?utm_source=devtools
• https://web.dev/same-site-same-origin/?utm_source=devtools

如果父级设置了 Cross-Origin-Opener-Policy

[
  {
    key: 'Cross-Origin-Embedder-Policy',
    value: 'require-corp',
  },
  {
    key: 'Cross-Origin-Opener-Policy',
    value: 'same-origin',
  },
]

引用外部链接会无法工作，比如说 s3 img 资源。需要设置 header

example: cross-origin-resource-policy: cross-origin

Cross-Origin-Resource-Policy: same-site | same-origin | cross-origin

引入 iframe easyRPG player 也会被阻止

还会出现 cross-origin-embedder-policy 警告

Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Resource-Policy: cross-origin