CrossOriginOpenerPolicy

Builder for the Cross-Origin-Opener-Policy (COOP) HTTP response header.

Usage

Source

CrossOriginOpenerPolicy()

COOP lets a page opt into a dedicated browsing context group or share like with its opener, helping protect against XS-Leaks.

Default header value: same-origin

Notes

* If this header is absent, browsers behave as if unsafe-none were set. * Use the fluent helpers to pick MDN-defined directives; value(...) is provided as an escape hatch.

Resources: - https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Cross-Origin-Opener-Policy - https://owasp.org/www-project-secure-headers/#cross-origin-opener-policy

Parameter Attributes

header_name: str
_directive: str = DEFAULT_VALUE