resourcePolicy property
The Cross-Origin-Resource-Policy (CORP) header, sent for every static
file response, since CORP is a per-resource header. Disabled by default.
same-site or same-origin prevents other sites from embedding or
reading these files.
Implementation
final String resourcePolicy;