[whatwg/fetch] Cross-Origin-Resource-Policy advice (#767)

As @mikewest noted in #733 there should be some advice as to when to use this header and that it should probably be used in conjunction with `X-Frame-Options: ...` at least until all browsers ship site isolation.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/767