Planned support for Cross-Origin-Embedder-Policy and Cross-Origin-Opener-Policy

[milkyjoe90]

Hi,

Are there any plans to add support for checking Cross-Origin-Embedder-Policy and Cross-Origin-Opener-Policy headers in the observatory? These would be a great addition! Many thanks and keep up the great work!

Joe

[caugner]

Thank you for this suggestion.

Currently, the Cross-Origin-Embedder-Policy (COEP) and Cross-Origin-Opener-Policy (COOP) headers should already be displayed on the "Raw server headers" tab.

Is your expectation that the presence (or not) of these headers should impact the scoring?

[milkyjoe90]

Hey @caugner, apologies, I should have stated that I was hoping for the headers to be added to the tests and scoring

[caugner]

Thanks for clarifying, I will bring this up with the security team.