Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Reinitialize storage partition nonce on embedder-initiated navigations #19

Open
gtanzer opened this issue Mar 30, 2022 · 0 comments
Open
Labels
specification Additions to specifications

Comments

@gtanzer
Copy link
Collaborator

gtanzer commented Mar 30, 2022

In order to prevent joining information from multiple opaque URLs, or communicating information adaptively into the fenced frame, embedder-initiated navigations should create a fresh slate inside the fenced frame, in particular rerandomizing the storage partitioning nonce.

aarongable pushed a commit to chromium/chromium that referenced this issue Mar 30, 2022
… navigation in MPArch

Each time the embedder navigates the fenced frame, there should be no state left over from the previous document.

We interpose in the code path in the browser that only embedder-initiated navigations take, and rerandomize the nonce.

ShadowDOM implementation TBD.

Design document: https://docs.google.com/document/d/1IEzRXhHRwflVfCSQ_d3yqXuYY3YSubxN7KTV1BCmbso/edit#heading=h.y59u58t38jnc

Spec issue: WICG/fenced-frame#19

Bug: 1123606
Change-Id: I4b9cd31a1b7f7bb7a9b09adb408eb91f39a4bce9
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3556266
Reviewed-by: Dominic Farolino <dom@chromium.org>
Reviewed-by: Shivani Sharma <shivanisha@chromium.org>
Commit-Queue: Garrett Tanzer <gtanzer@chromium.org>
Cr-Commit-Position: refs/heads/main@{#987055}
mjfroman pushed a commit to mjfroman/moz-libwebrtc-third-party that referenced this issue Oct 14, 2022
… navigation in MPArch

Each time the embedder navigates the fenced frame, there should be no state left over from the previous document.

We interpose in the code path in the browser that only embedder-initiated navigations take, and rerandomize the nonce.

ShadowDOM implementation TBD.

Design document: https://docs.google.com/document/d/1IEzRXhHRwflVfCSQ_d3yqXuYY3YSubxN7KTV1BCmbso/edit#heading=h.y59u58t38jnc

Spec issue: WICG/fenced-frame#19

Bug: 1123606
Change-Id: I4b9cd31a1b7f7bb7a9b09adb408eb91f39a4bce9
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3556266
Reviewed-by: Dominic Farolino <dom@chromium.org>
Reviewed-by: Shivani Sharma <shivanisha@chromium.org>
Commit-Queue: Garrett Tanzer <gtanzer@chromium.org>
Cr-Commit-Position: refs/heads/main@{#987055}
NOKEYCHECK=True
GitOrigin-RevId: 54729de4bcc52e75d95636b3cccdb07515af787e
@domfarolino domfarolino changed the title [Spec] Reinitialize context (including storage partition) on embedder-initiated navigations Reinitialize storage partition nonce on embedder-initiated navigations Jun 3, 2023
@domfarolino domfarolino added the specification Additions to specifications label Jun 3, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
specification Additions to specifications
Projects
None yet
Development

No branches or pull requests

2 participants