Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Coop noopener allow popups #36232

Open
wants to merge 3 commits into
base: main
Choose a base branch
from
Open

Coop noopener allow popups #36232

Changes from 2 commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
062857f
Add COOP noopener-allow-popups values
yoavweiss Oct 7, 2024
6182549
Update files/en-us/web/http/headers/cross-origin-opener-policy/index.md
yoavweiss Oct 8, 2024
e4f2bc2
style
yoavweiss Oct 11, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions files/en-us/web/http/headers/cross-origin-opener-policy/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,6 +32,7 @@ If a cross-origin document with COOP is opened in a new window, the opening docu
Cross-Origin-Opener-Policy: unsafe-none
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Opener-Policy: noopener-allow-popups
```

### Directives
Expand All @@ -42,6 +43,9 @@ Cross-Origin-Opener-Policy: same-origin
- : Retains references to newly opened windows or tabs that either don't set COOP or that opt out of isolation by setting a COOP of `unsafe-none`.
yoavweiss marked this conversation as resolved.
Show resolved Hide resolved
- `same-origin`
- : Isolates the browsing context exclusively to same-origin documents. Cross-origin documents are not loaded in the same browsing context.
- `noopener-allow-popups`
- : Severs the opener connection to the new document, isolating the browsing context for the current document regardless of the opener document's origin.
This ensures that the opener can't run scripts in the opened documents even if they are same origin.
yoavweiss marked this conversation as resolved.
Show resolved Hide resolved

## Examples

Expand Down