Web Security · Senior · Question 26 of 75
What does Cross-Origin-Embedder-Policy: credentialless change compared with require-corp?
- 1It disables all cookies for the whole site
- ✓Correct answer: Cross-origin no-CORS subresources load without cookies instead of needing a CORP header
- 3It allows any iframe to read the page
Explanation
It makes cross-origin isolation easier to adopt with third-party images and scripts that don't send CORP.