Cookie
Cookie sent from the browser
HTTP headers included
Cross Origin Embedder Policy
Cross Origin Resource Policy