Cross-Origin Isolation Demo

Cross-Origin-Opener-Policy:

Cross-Origin-Embedder-Policy:

All headers sent:

crossOriginIsolated:

Example: <img> elements

<img>

<img crossorigin="anonymous">

Server allows with CORS

<img>

Server allows with CORP

Some extra content here...