CORP
CORP (Cross-Origin Resource Policy) lets a resource declare which cross-origin contexts may load it (same-origin/same-site/cross-origin).
Purpose
To provide resource-level cross-origin loading restrictions, preventing cross-origin pages from loading sensitive resources; the companion of COEP.
Mechanism
The resource responds with a Cross-Origin-Resource-Policy: same-origin header, so only same-origin contexts can load it. same-site allows the same site; cross-origin allows any. Defaults to same-origin (without COEP).
Use cases
- Cross-origin resource protection
- COEP companion
- Sensitive resource isolation
Related tools
HTTP Status Codes
Reference table of common HTTP status codes (1xx-5xx) with names, categories, and descriptions. Free, private, and 100% client-side. TOOL
URL Parser
Parse a URL into its components: protocol, host, path, query, hash, port, username, and password. Free, private, and 100% client-side. TOOL