Iframe credentialless gives developers a way to load documents in third party iframe using a new and ephemeral context. In return, the Cross-Origin-Embedder-Policy (COEP) embedding rules can be lifted.
This way, developers using COEP can now embed third party iframes that do not.
:warning: This used to be named
Anonymous iframe
, before addressing https://github.com/WICG/anonymous-iframe/issues/5
You are welcome to contribute!
Under development: Feature status
The WIP implementation can be tried, using the command line flags:
google-chrome-beta --enable-blink-features=AnonymousIframe --enable-features=PartitionedCookies
Check the Demo
Implementation tracker: https://crbug.com/1226469
Fill bugs, under the
Blink>SecurityFeature>AnonymousIframe
component.