embedderPolicy property
The Cross-Origin-Embedder-Policy (COEP) header, sent only for
text/html responses. Disabled by default.
Enabling require-corp blocks every cross-origin subresource that does
not opt in via CORP/CORS, so it should only be enabled by a document
that needs cross-origin isolation (e.g. for SharedArrayBuffer).
Implementation
final String embedderPolicy;