Web Security · Middle · Question 73 of 75
What does Cross-Origin-Resource-Policy: same-origin do?
- 1Encrypts the resource for same-origin requests
- 2Allows any site to read the resource with CORS
- ✓Correct answer: Prevents other origins from embedding the resource, for example in
<img>or<script>
Explanation
CORP protects resources from being loaded into other sites' processes, which matters for side-channel attacks like Spectre.