Cross-Origin Isolation Playground

Set HTTP headers for this page.

Test identity federation with iframe and 3p cookie

Set various headers for a cross-origin image.

Set various headers for a cross-origin iframe.

Set various headers for a cross-origin popup window.

Set various headers for a same-origin worker script.

Learn more

• Security Headers Quick Reference
• Making your website "cross-origin isolated" using COOP and COEP
• Why you need "cross-origin isolated" for powerful features
• A guide to enable cross-origin isolation
• SharedArrayBuffer updates in Android Chrome 88 and Desktop Chrome 92
• Load cross-origin resources without CORP headers using `COEP: credentialless`
• Iframe credentialless: Easily embed iframes in COEP environments