From 6bc25d067da6510177acaf5f846950e7bad2251e Mon Sep 17 00:00:00 2001 From: Brian <64915763+Simlor@users.noreply.github.com> Date: Thu, 18 Jul 2024 16:07:57 +0200 Subject: [PATCH] Clarified when "require-corp" is the default value --- .../1.documentation/2.headers/3.crossOriginEmbedderPolicy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/content/1.documentation/2.headers/3.crossOriginEmbedderPolicy.md b/docs/content/1.documentation/2.headers/3.crossOriginEmbedderPolicy.md index 55ca68b2..ddd33412 100644 --- a/docs/content/1.documentation/2.headers/3.crossOriginEmbedderPolicy.md +++ b/docs/content/1.documentation/2.headers/3.crossOriginEmbedderPolicy.md @@ -64,7 +64,7 @@ Allows the document to fetch cross-origin resources without giving explicit perm ### `require-corp` -This is the default value. A document can only load resources from the same origin, or resources explicitly marked as loadable from another origin. If a cross origin resource supports CORS, the crossorigin attribute or the Cross-Origin-Resource-Policy header must be used to load it without being blocked by COEP. +In `strict` mode, this is the default value. A document can only load resources from the same origin, or resources explicitly marked as loadable from another origin. If a cross origin resource supports CORS, the crossorigin attribute or the Cross-Origin-Resource-Policy header must be used to load it without being blocked by COEP. ### `credentialless`