Cross-Origin-Opener-Policy header
COOP isolates your page's browsing context from cross-origin windows it opens or that open it.
Recommended value
Cross-Origin-Opener-Policy: same-originWhat it protects against
Cross-window attacks and side-channel leaks such as XS-Leaks, and it is required for cross-origin isolation.
Before you turn it on
same-origin can break OAuth or payment pop-ups that rely on window.opener. Use same-origin-allow-popups in that case.
How to add Cross-Origin-Opener-Policy
Check your site's headers now
Korrali Web scans your site and shows which security headers are missing or misconfigured.
Run a free scan