All Security Checks
HeadersMedium PriorityPro
Cross-Origin-Resource-Policy
CORP specifies which origins can include your resources, providing protection against cross-origin attacks.
Why It Matters
Prevents your resources from being loaded by cross-origin documents without permission, protecting against Spectre attacks and resource theft.
How We Check
We check for CORP header and verify appropriate values (same-origin, same-site, or cross-origin) based on resource type.
How to Fix
Add Cross-Origin-Resource-Policy: same-origin for sensitive resources. Use cross-origin only for intentionally public resources.
Related Security Checks
Check Your Website Now
Run a free security scan to check for Cross-Origin-Resource-Policy issues and 58+ other security vulnerabilities.
Scan Your Website Free