Cross-Origin-Opener-Policy
Response headers
Isolates the browsing context so other origins cannot hold a handle to the window.
| On the wire | Cross-Origin-Opener-Policy: … |
|---|---|
| Category | Response headers |
Headers the server attaches when it answers.
How to read this
- The first digit of a status code carries the meaning: 4 means the request, 5 means the server.
- 404 means "not there"; 403 means "there, but not for you". Swapping them makes debugging slower.
- Header names are case-insensitive — Content-Type and content-type are the same header.
- Caching and CORS problems usually come down to one header line, visible in the browser’s network tab.
Frequently asked questions
Q. What does HTTP Cross-Origin-Opener-Policy mean?
Isolates the browsing context so other origins cannot hold a handle to the window.
Q. What does Cross-Origin-Opener-Policy look like on the wire?
It travels as Cross-Origin-Opener-Policy: …
Q. Where does Cross-Origin-Opener-Policy appear?
In response headers.
Q. What group does Cross-Origin-Opener-Policy belong to?
The response headers group; the rest of that group is listed further down.