This page demonstrates how Cross-Origin Read Blocking (CORB) works. Please see one of the following resources for more information about CORB:
Repro steps to trigger CORB:
--enable-features=CrossSiteDocumentBlockingAlways
cmdline flag.<img src="https://www.chromium.org/">
element that tries to sneak a cross-origin text/html document into
memory of a renderer process hosting another origin.img
element.
Blocked current origin from receiving cross-site document at
https://www.chromium.org/ with MIME type text/html.
Cross-Origin Read Blocking (CORB) blocked cross-origin
response https://www.example.com/example.html with MIME type
text/html. See
https://www.chromestatus.com/feature/5629709824032768 for more
details.
SiteIsolation.XSD.Browser*
metrics. In particular, the
SiteIsolation.XSD.Browser.Action
metric logs the
following events:
0 - response started, 1 - blocked without sniffing,
2 - blocked after sniffing, 3 - allowed without sniffing,
4 - allowed after sniffing.
Clicking the button below should increment by one the counter of
"1 - blocked without sniffing" events.
Dynamic content below...