Cross-origin isolation (COOP / COEP / CORP)
Three response headers — Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy, and Cross-Origin-Resource-Policy — that sever risky cross-window and cross-origin links and defend against side-channel leaks.
HTML Standard — Cross-Origin-Opener-Policy
Fetch Standard — Cross-Origin-Resource-Policy header