Cross-Origin-Resource-Policy HTTP Header

Cross-Origin-Resource-Policy

The cross-origin policy.

Accepted Values

One of the following values is accepted.

cross-origin

Allow cross-origin requests.

same-origin

Allow same origin requests only.

same-site

Allow same site requests only.

Example

Cross-Origin-Resource-Policy: same-site

Parse

Enter a Cross-Origin-Resource-Policy header below to parse and return details about it.

Reference

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cross-Origin-Resource-Policy