Welcome What's new in Chrome extensions API reference Samples
Welcome What's new in Chrome extensions API reference Samples

Cross-origin opener policy

Published on

Warning

You're viewing the deprecated Manifest V2 version of this article. See Manifest V3 - Manifest Cross-origin opener policy for the MV3 equivalent.

The Chrome Web Store no longer accepts Manifest V2 extensions. Follow the Manifest V3 Migration guide to convert your extension to Manifest V3.

The cross_origin_opener_policy manifest key lets extensions specify a value for the Cross-Origin-Opener-Policy (COOP) response header for requests to the extension's origin. This includes the extension's background context (service worker or background page), popup, options page, tabs that are open to an extension resource, etc.

Together with cross_origin_embedder_policy, this key allows extensions opt into cross-origin isolation.

Manifest declaration

This key was introduced in Chrome 93.

The cross_origin_opener_policy manifest key takes an object. This object should only contain one property named value with a string value. Chrome uses this string as the value of the Cross-Origin-Opener-Policy header when serving resources from the extension's origin. For example:

{
...
"cross_origin_opener_policy": {
"value": "same-origin"
},
...
}

See Cross-origin isolation overview for more information about this feature.

Published on Improve article

This site uses cookies to deliver and enhance the quality of its services and to analyze traffic. If you agree, cookies are also used to serve advertising and to personalize the content and advertisements that you see. Learn more about our use of cookies.