Click here to download the Blitz Browser!

WPT

wpt / html / cross-origin-embedder-policy / require-corp.https.html

Spec: https://html.spec.whatwg.org/multipage/origin.html#coep ↗

Runs: Chrome 155.0.8041.0 (wpt@2c385f65e, 2026-09-04) | Firefox 157.0a1 (wpt@2c385f65e, 2026-09-04) | Safari 251 preview (wpt@5ce815a83, 2026-08-27) | Ladybird 1.0-a7825 (wpt@2c385f65e, 2026-09-04) | Servo Servo 0.6 (wpt@7e3d005d7, 2026-09-03) | Blitz a50cb8971 (wpt@a95401e4e, 2026-09-03)

View on the Blitz WPT dashboard | Open test on wpt.live | wpt.fyi

ChromeFirefoxSafariLadybirdServoBlitz
Total16/1616/1616/166/1610/16NOT RUN
SubtestChromeFirefoxSafariLadybirdServoBlitz
"require-corp" top-level: navigating a frame to "none" should failPASSPASSPASSFAILFAIL
"require-corp" top-level: navigating a frame from "require-corp" to "none" should failPASSPASSPASSFAILFAIL
"require-corp" top-level: creating a noopener "none" popup should succeedPASSPASSPASSPASSPASS
"require-corp" top-level: creating a "none" popup should succeed.PASSPASSPASSPASSPASS
"require-corp" top-level (as popup): navigating to "none" should succeedPASSPASSPASSTIMEOUTPASS
"require-corp" top-level (as noopener popup): navigating to "none" should succeedPASSPASSPASSTIMEOUTPASS
"require-corp" top-level (as popup with opener set to null): navigating to "none" should succeedPASSPASSPASSTIMEOUTPASS
"require-corp" top-level: fetch() to CORP: cross-origin response should succeedPASSPASSPASSPASSPASS
"require-corp" top-level: fetch() to response without CORP should failPASSPASSPASSFAILFAIL
"require-corp" top-level: fetch() to response without CORP through a WindowProxy should failPASSPASSPASSFAILFAIL
"require-corp" top-level: navigating an iframe to a page without CORP, through a WindowProxy, should failPASSPASSPASSFAILFAIL
CORP: same-site is checked and allowed.PASSPASSPASSPASSPASS
CORP: same-site is checked and blocked.PASSPASSPASSFAILFAIL
navigation CORP is checked with the parent frame, not the navigation source - to be allowedPASSPASSPASSTIMEOUTPASS
navigation CORP is checked with the parent frame, not the navigation source - to be blockedPASSPASSPASSPASSPASS
navigation CORP is checked for each redirectPASSPASSPASSPASSPASS