Hacker News new | ask | show | jobs
by lights0123 1838 days ago
Chrome needs the same headers too since Chrome 91, as it was violating CORS without requiring them.
1 comments

It does not require CORS (cross origin resource sharing), it requires COEP/COOP.
Yes, but because it did not require COEP/COOP, it allowed websites to break CORS policies through Spectre.