We received a message from Google that says we need to add COOP and/or COEP headers
New requirements for SharedArrayBuffers on https://example.com/ Google systems have recently detected that SharedArrayBuffers (SABs) are used on https://example.com/, but COOP and/or COEP headers are not served. For Web Compatibility reasons Chrome is planning to require COOP/COEP for the use of SABs from Chrome 91 (2021-05-25) onwards. Please implement 'cross-origin-isolated' behavior on your site.
We added these headers accordingly.
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
and added crossorigin attribute to all external resources
<script src="https://checkoutshopper-live.adyen.com/checkoutshopper/sdk/3.4.0/adyen.js" crossorigin></script>
However,
the other resources loaded by the 3rd-party external scripts won't be loaded, and will get an ERR_BLOCKED_BY_RESPONSE error.
GET https://checkoutshopper-test.adyen.com/checkoutshopper/images/analytics.png?version=3.4.0&payload_version=1&platform=web&locale=en_US&containerWidth=571&component=scheme&flavor=components net::ERR_BLOCKED_BY_RESPONSE
This is not the only 3rd-party script that is broken after adding the COOP and COEP header. Google Recaptcha v2 is broken too.
This occurs on Chrome version 89.0.4389.90
Does anyone know how to resolve this without asking each third party to change their CORS header for us?
