{
  "@context": "https://schema.org",
  "@id": "https://webspecification.com/spec/security/cross-origin-isolation.jsonld",
  "@graph": [
    {
      "@type": "TechArticle",
      "@id": "https://webspecification.com/spec/security/cross-origin-isolation/#article",
      "headline": "Cross-origin isolation (COOP / COEP / CORP)",
      "description": "Three response headers — Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy, and Cross-Origin-Resource-Policy — that sever risky cross-window and cross-origin links and defend against side-channel leaks.",
      "url": "https://webspecification.com/spec/security/cross-origin-isolation/",
      "inLanguage": "en",
      "isPartOf": {
        "@type": "WebSite",
        "@id": "https://webspecification.com/#website",
        "name": "Web Specification Studio",
        "url": "https://webspecification.com"
      },
      "author": {
        "@type": "Person",
        "name": "Web Specification Studio",
        "url": "https://webspecification.com"
      },
      "publisher": {
        "@type": "Organization",
        "@id": "https://webspecification.com/#organization",
        "name": "Web Specification Studio",
        "url": "https://webspecification.com"
      },
      "license": "https://creativecommons.org/licenses/by/4.0/",
      "dateModified": "2026-06-11T00:00:00.000Z",
      "citation": [
        {
          "@type": "CreativeWork",
          "name": "HTML Standard — Cross-Origin-Opener-Policy",
          "url": "https://html.spec.whatwg.org/multipage/browsers.html#the-coop-headers",
          "publisher": {
            "@type": "Organization",
            "name": "WHATWG"
          }
        },
        {
          "@type": "CreativeWork",
          "name": "Fetch Standard — Cross-Origin-Resource-Policy header",
          "url": "https://fetch.spec.whatwg.org/#cross-origin-resource-policy-header",
          "publisher": {
            "@type": "Organization",
            "name": "WHATWG"
          }
        },
        {
          "@type": "CreativeWork",
          "name": "MDN — Cross-Origin-Opener-Policy",
          "url": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Cross-Origin-Opener-Policy",
          "publisher": {
            "@type": "Organization",
            "name": "MDN"
          }
        },
        {
          "@type": "CreativeWork",
          "name": "MDN — Cross-Origin-Resource-Policy",
          "url": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Cross-Origin-Resource-Policy",
          "publisher": {
            "@type": "Organization",
            "name": "MDN"
          }
        }
      ]
    },
    {
      "@type": "BreadcrumbList",
      "@id": "https://webspecification.com/spec/security/cross-origin-isolation/#breadcrumb",
      "itemListElement": [
        {
          "@type": "ListItem",
          "position": 1,
          "name": "Home",
          "item": "https://webspecification.com/"
        },
        {
          "@type": "ListItem",
          "position": 2,
          "name": "Spec",
          "item": "https://webspecification.com/spec/"
        },
        {
          "@type": "ListItem",
          "position": 3,
          "name": "Security",
          "item": "https://webspecification.com/spec/security/"
        },
        {
          "@type": "ListItem",
          "position": 4,
          "name": "Cross-origin isolation (COOP / COEP / CORP)",
          "item": "https://webspecification.com/spec/security/cross-origin-isolation/"
        }
      ]
    }
  ]
}