privacycg / storage-access

The Storage Access API
https://privacycg.github.io/storage-access/
199 stars 27 forks source link

Add Automation subsection #42

Closed bwalderman closed 4 years ago

bwalderman commented 4 years ago

This change updates the spec with a WebDriver extension command for modifying the user agent's storage access policy. This is to address: https://github.com/w3c/webdriver/issues/1437#issue-474647752

bwalderman commented 4 years ago

What should happen if the browsing context is the top-level browsing context? What if its active document is same-site with the top-level site?

Thanks, I've added steps to handle these cases.

It seems there should also be API surface to ensure certain outcomes before documents are created. That is, that you know what when you create a nested document it won't have partitioned data (or will).

I've changed the API slightly. It now treats the current browsing context as the top-level site, and take a parameter to specify which embedded site to block or allow. This makes it possible to set policy for an embedded site without needing to create any nested documents and switch contexts first.