Cross-Origin-Opener-Policy: same-origin unsafe-allow-outgoing