MENU

…...crossorigin (CORS)

={anonymous | use-credentials}

Setting the credentials flag to 'same-origin', "anonymous" or "" (or any invalid keyword) means that there will be no exchange of user credentials via cookies, client-side SSL certificates, or HTTP authentication unless it is in the same origin.

Setting the credentials flag to 'include', "use-credentials" means such information will be exchanged.

If the 'crossorigin' attribute is not set, no CORS is used at all in combination with a CORS header.

This attribute is valid on the elements <script>, <link>, <img>, <audio> and <video>.