If your website all your resources are in the same domain, add the `Cross-Origin-Resource-Policy: same-site` response header to your resources. If you use a CDN or serve some resources from an external domain, add the `Cross-Origin-Resource-Policy: same-origin` *and* `Access-Control-Allow-Origin: https://yourbusiness.example` response headers to your (external) resources and force a CORS request by using the `crossorigin` attribute.
November 5, 2022
by Ricardo Ivan Vieitez Parra
·
4,885 Views
·
1 Like