Cross-Origin-Resource-Policy defaulting

[annevk]

Should this have a mode that makes Cross-Origin-Resource-Policy default to same-origin for the entire origin?

[domenic]

I feel like that's better as a separate policy item in the origin policy, as I don't quite see the connection to to the agent key isolation? But yeah, it'd be nifty if we had such a policy item.

[annevk]

Maybe it's a more of a comment on naming then as this would also be a form of origin isolation.

[domenic]

I would name the proposed policy item "cross_origin_resources": { "policy": "...", "policy_report_only": "..." }, personally.