You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
What is the semantic of the credentials attribute? credentials=omit vs credentials=present doesn't look good because of inconsistency (omit is a verb, while present is an adjective). In case, I'd suggest having credentials=use instead.
However, I am a bit unhappy with credentials=omit since this is misleading. Credentials are partitioned, not omitted. Moreover, I don't see the point of having a non-boolean attribute for something that can only be set and not unset (credentials=use - if we go with it - has no point of existing, apart from giving a value to be returned by the getter, since a subframe of an anonymous iframe is always anonymous and this cannot be overwritten).
I would reconsider having a boolean attribute instead, something like <iframe anonymous> or <iframe partitioned> or <iframe isolated> or <iframe partitioned-storage> or <iframe clean-credentials> (I fear none of these is a particularly good choice though).
The text was updated successfully, but these errors were encountered:
What is the semantic of the
credentials
attribute?credentials=omit
vscredentials=present
doesn't look good because of inconsistency (omit
is a verb, whilepresent
is an adjective). In case, I'd suggest havingcredentials=use
instead.However, I am a bit unhappy with
credentials=omit
since this is misleading. Credentials are partitioned, not omitted. Moreover, I don't see the point of having a non-boolean attribute for something that can only be set and not unset (credentials=use
- if we go with it - has no point of existing, apart from giving a value to be returned by the getter, since a subframe of an anonymous iframe is always anonymous and this cannot be overwritten).I would reconsider having a boolean attribute instead, something like
<iframe anonymous>
or<iframe partitioned>
or<iframe isolated>
or<iframe partitioned-storage>
or<iframe clean-credentials>
(I fear none of these is a particularly good choice though).The text was updated successfully, but these errors were encountered: