files/en-us/web/api/htmllinkelement/crossorigin/index.md
{{APIRef("HTML DOM")}}
The crossOrigin property of the {{domxref("HTMLLinkElement")}} interface specifies the Cross-Origin Resource Sharing ({{Glossary("CORS")}}) setting to use when retrieving the resource.
A string of a keyword specifying the CORS mode to use when fetching the resource. Possible values are:
anonymous or the empty string ("")
cors {{domxref("Request.mode", "mode", "", "nocode")}} and the same-origin {{domxref("Request.credentials", "credentials", "", "nocode")}} mode. This means that CORS is enabled and credentials are sent if the resource is fetched from the same origin from which the document was loaded.use-credentials
cors {{domxref("Request.mode", "mode", "", "nocode")}} and the include {{domxref("Request.credentials", "credentials", "", "nocode")}} mode. All resources requests by the element will use CORS, regardless of what domain the fetch is from.If the crossOrigin property is specified with any other value, it is the same as specifying as the anonymous.
If the crossOrigin property is not specified, the resource is fetched without CORS (the no-cors {{domxref("Request.mode", "mode", "", "nocode")}} and the same-origin {{domxref("Request.credentials", "credentials", "", "nocode")}} mode).
{{Specifications}}
{{Compat}}