CORP

Cross Origin Resource Policy (CORP) lets web sites and applications opt in for protection against certain requests from other origins to mitigate speculative side-channel attacks, like Spectre, as well as Cross-Site Script Inclusion attacks.