Cross-Origin-Resource-Policy header
CORP lets you say which origins may load your resources, such as images and scripts.
Recommended value
Cross-Origin-Resource-Policy: same-originWhat it protects against
Other sites embedding your resources to read them through side channels.
Before you turn it on
Use same-site or cross-origin for assets that other sites or your CDN subdomains legitimately load.
How to add Cross-Origin-Resource-Policy
Check your site's headers now
Korrali Web scans your site and shows which security headers are missing or misconfigured.
Run a free scan