Home » XSS Cross-Site Scripting » Cross-Origin-Embedder-Policy (COEP)

HTTP Headers: Cross-Origin-Embedder-Policy (COEP)


HTTP Security Headers: Cross-Origin-Embedder Policy

HTTP Headers: Cross-Origin-Embedder-Policy (COEP)

Wie Sie die Cross-Origin-Embedder-Policy einsetzen:

COEP or Cross Origin Embedder Policy is an HTTP-header based mechanism that prevents a document from loading cross-origin resources that don’t explicitly grant the document permission with CORP or CORS. COEP lets you declare that a document cannot load these resources.

Enabling COEP prevents a document from loading any non-same-origin resources which don’t explicitly grant the document permission to be loaded. The only allowed value for COEP is require-corp.

To activate this policy, append the following HTTP header to the document:

PHP
header('Cross-Origin-Embedder-Policy: require-corp');
GetSafe 360° Box

360° Website SecurityRundum-Absicherung

  • HTTP-Sicherheits-Header
  • Inhaltsicherheitsrichtlinie (CSP)
  • XSS-Absicherung

Ihr Internet-Auftritt ist nur so sicher wie die schwächste Stelle.

Schlüsselfertige Absicherung:

Unsere Experten erledigen diese Aufgabe komplett für Sie.
Statt 289,- € jetzt zum Vorzugspreis von 149,- €

Jetzt Starten »