search

privacycg / storage-access

The Storage Access API
https://privacycg.github.io/storage-access/
199 stars 27 forks source link

What should happen if the top-level origin is an opaque origin #40

Closed annevk closed 3 years ago

annevk commented 4 years ago

A top-level document can sandbox itself. If it embeds tracker.example and that were to invoke requestStorageAccess(), what should happen?

I suspect we should disallow in this case as you cannot have meaningful UI.

We also generally do not allow storage for opaque origins so maybe storage would be disabled for the entire frame tree?