Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

COEP needs to set cross-origin isolated for shared/service workers #5292

Open
annevk opened this issue Feb 14, 2020 · 1 comment
Open

COEP needs to set cross-origin isolated for shared/service workers #5292

annevk opened this issue Feb 14, 2020 · 1 comment
Labels
topic: cross-origin-embedder-policy Issues and ideas around the new "require CORP for subresource requests and frames and etc" proposal.

Comments

@annevk
Copy link
Member

annevk commented Feb 14, 2020

Thanks to @yutakahirano I realized that https://mikewest.github.io/corpp/ doesn't describe how the cross-origin isolated bit gets set for agent clusters of shared/service workers.

For documents this happens because the browsing context group has that bit set (due to COOP, primarily) and then each agent cluster that belongs to that browsing context group also has it set. (https://gist.github.com/annevk/6f2dd8c79c77123f39797f6bdac43f3e#changes-to-navigation step 6.ii. at the moment.)

@annevk annevk added the topic: cross-origin-embedder-policy Issues and ideas around the new "require CORP for subresource requests and frames and etc" proposal. label Feb 14, 2020
@yutakahirano yutakahirano mentioned this issue Jun 15, 2020
3 tasks
@domenic
Copy link
Member

domenic commented Jul 8, 2020

Note that this is currently set for things that use "run a worker" (WorkerGlobalScope and SharedWorkerGlobalScope), but not set for ServiceWorkerGlobalScope or WorkletGlobalScope.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
topic: cross-origin-embedder-policy Issues and ideas around the new "require CORP for subresource requests and frames and etc" proposal.
Development

No branches or pull requests

2 participants