Cross-Origin-Resource-Policy

HTTP response header

Header usage statistics

Cross-Origin-Resource-Policy response header information and usage statistics.

Websites using header Cross-Origin-Resource-Policy 9,468
Percentage of websites that use Cross-Origin-Resource-Policy header <0.1%
Total discovered header values 26
Header uses directives Yes
Header values are unique or random No
Most popular in the country United States of America

Cross-Origin-Resource-Policy Directives (3 total)

  • cross-origin
  • same-origin
  • same-site

Cross-Origin-Resource-Policy Directives

Cross-Origin-Resource-Policy directives value information and usage statistics

Directive Share Websites count Unique Values
cross-origin 17.13% 1,622 1
same-origin 4.66% 441 1
same-site 2.11% 200 1

Distribution by websites popularity

Cross-Origin-Resource-Policy detection in the top websites by popularity

Top 10k sites 104 websites
Top 100k sites 247 websites
Top 1m sites 871 websites

Websites utilizing Cross-Origin-Resource-Policy

List of websites that use Cross-Origin-Resource-Policy header

Domain Country Rank Contacts
www.youtube.com United States of America 4
goo.gl United States of America 17
play.google.com United States of America 19
docs.google.com United States of America 27
drive.google.com United States of America 29
google-analytics.com United States of America 36
See full domain list
Flat price per the report, subscription is not required.

Geographical Distribution

Header usage distribution by websites across the globe.






Common header values

List of top common Cross-Origin-Resource-Policy header values

Header value Value prevalence
cross-origin 76.04%
same-origin 15.29%
same-site 7.93%
(same-site|same-origin|cross-origin) 0.14%
cross-site 0.11%
SAMEORIGIN 0.08%
unsafe-none 0.04%
* 0.03%
cross-origin; 0.03%
Same 0.03%
same-origin; 0.03%
samesite 0.02%
(same-site) 0.02%
(unsafe-none|require-corp); report-to='default' 0.02%
cross-origin; report-to="default" 0.02%
default-src 'self' *.amplethemes.com *.wordpress.com *.wordpress.org; img-src *; report-uri http://kevinriggs.com/_reports/ 0.02%
same-site; report-to="default" 0.02%
same-site, cross-origin 0.02%
same-site | same-origin | cross-origin 0.02%
(same-site | same-origin | cross-origin) 0.01%