Every check ยท Headers
Cross-Origin-Opener-Policy
What it checks
The Cross-Origin-Opener-Policy header.
Why it matters
It cuts the link between this page and windows it opens or that opened it, which other sites can misuse.
How to fix it
- Send Cross-Origin-Opener-Policy: same-origin, or same-origin-allow-popups if the site opens sign-in or payment windows.
Cross-Origin-Opener-Policy: same-originCheck a site for this and everything else: snag.page. More on headers: Bot challenge Content-Security-Policy Framing nosniff Referrer policy Software versions End-of-life software CORS Permissions-Policy