Skip to content

Commit 811626a

Browse files
authored
fix: coep reference to corp cross-origin (mdn#40785)
1 parent 18d2846 commit 811626a

File tree

1 file changed

+1
-1
lines changed
  • files/en-us/web/http/reference/headers/cross-origin-embedder-policy

1 file changed

+1
-1
lines changed

files/en-us/web/http/reference/headers/cross-origin-embedder-policy/index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ sidebar: http
1010
The HTTP **`Cross-Origin-Embedder-Policy`** (COEP) {{Glossary("response header")}} configures the current document's policy for loading and embedding cross-origin resources.
1111

1212
The policy for whether a particular resource is embeddable cross-site may be defined for that resource using the {{HTTPHeader("Cross-Origin-Resource-Policy")}} (CORP) header for a `no-cors` fetch, or using [CORS](/en-US/docs/Web/HTTP/Guides/CORS).
13-
If neither of these policies are set, then by default, resources can be loaded or embedded into a document as though they had a CORP value of `cross-site`.
13+
If neither of these policies are set, then by default, resources can be loaded or embedded into a document as though they had a CORP value of `cross-origin`.
1414

1515
The **`Cross-Origin-Embedder-Policy`** allows you to require that CORP or CORS headers be set in order to load cross-site resources into the current document.
1616
You can also set the policy to keep the default behavior, or to allow the resources to be loaded, but strip any credentials that might otherwise be sent.

0 commit comments

Comments
 (0)