| CARVIEW |
Select Language
HTTP/2 308
server: Varnish
retry-after: 0
x-glitch-project-name: cross-origin-isolation
access-control-allow-origin: *
location: https://chrome.dev/f/cross-origin-isolation//
accept-ranges: bytes
date: Thu, 25 Dec 2025 22:05:43 GMT
via: 1.1 varnish
x-served-by: cache-bom-vanm7210048-BOM
x-cache: HIT
x-cache-hits: 0
x-timer: S1766700344.967128,VS0,VE0
content-length: 0
HTTP/2 200
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-powered-by: Express
set-cookie: room=7OPPRpUM; Path=/; HttpOnly; Secure
report-to: {"group":"default","max_age":86400,"endpoints":[{"url":"https://third-party-domain.appspot.com/reporting-endpoint/post/7OPPRpUM"}]},{"group":"uriports","max_age":86400,"endpoints":[{"url":"https://2j1hmdh4.uriports.com/reports"}]}
reporting-endpoints: default="https://third-party-domain.appspot.com/reporting-endpoint/post/7OPPRpUM",uriports="https://2j1hmdh4.uriports.com/reports"
x-content-type-options: nosniff
content-security-policy: script-src 'strict-dynamic' 'nonce-b775e780bd5a225b60f1f7c814040195' https: 'unsafe-inline' 'unsafe-eval' https://accounts.google.com;object-src 'none';base-uri 'none';img-src *;frame-src https://pay.google.com https://accounts.google.com https://third-party-domain.appspot.com *;connect-src https://accounts.google.com https://oauth.google.com;report-to uriports;default-src 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
etag: W/"df9-PpvHATI/1hiFrQcKsQffp8WH5o8"
x-cloud-trace-context: e15ad489cadc4dffd23bb2c1d2f0b28e;o=1
expires: Thu, 25 Dec 2025 22:05:44 GMT
cache-control: private
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-encoding: gzip
date: Thu, 25 Dec 2025 22:05:44 GMT
server: Google Frontend
content-length: 1347
Cross-Origin Isolation Playground
Cross-Origin Isolation Playground
Try various security headers and see how it affects loading of cross-origin contents.
Reports will be sent to https://third-party-domain.appspot.com/reporting-endpoint/post/7OPPRpUM.
Open the page and wait for the reports to show up. Reload not needed.