Browser & Web Performance · Senior · Question 4 of 75

After enabling `COEP: require-corp`, third-party images stopped loading. What are the options?

1Load the images with loading="eager"
✓Correct answer: The third party must send Cross-Origin-Resource-Policy: cross-origin or serve via CORS; or use COEP: credentialless
3Add the images to the CSP img-src list

Explanation

credentialless loads no-cors cross-origin resources without cookies, so they can't contain user-specific secrets.

Further reading

Test yourself

Take the Browser & Web Performance · Senior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.