CSP (Content-Security-Policy)

 And here's the detailed page on content-security-policy: https://content-security-policy.com/

CORS

This is the best article I read on CORS: https://blog.logrocket.com/the-ultimate-guide-to-enabling-cross-origin-resource-sharing-cors/