Contact emailsarthurs...@chromium.org, cl...@chromium.org
Anonymous iframes give developers a way to load documents in third party iframes using new and ephemeral contexts.
Anonymous iframes are a generalization of COEP credentialless to support 3rd party iframes that may not deploy COEP. Like with COEP credentialless, we replace the opt-in of cross-origin subresources by avoiding to load non-public resources. This will remove the constraint that 3rd party iframes must support COEP in order to be embedded in a COEP page and will unblock developers looking to adopt cross-origin-isolation.
This way, developers using COEP can now embed third party iframes that do not.
Search tagscoep, cross-origin-embedder-policy, iframe, anonymous
TAG review statusIssues addressed
Goals for experimentation
- Double check the feature makes sense given large developers like Google Ads and Zoom.
- Confirm this resolves the difficulties deploying COEP and understand any limitations.
- Get feedback about the shape of the API.
- Understand if developers need additional APIs to use it. For instance:
https://github.com/w3ctag/design-reviews/issues/742 or others.
Reason this experiment is being extended
Ongoing technical constraints
Anonymous iframes were designed to avoid breaking iframes. They do not introduce new kinds of failures.
In the devtool issue explaining an iframe was blocked by COEP, Anonymous iframes will be suggested as a potential solution.
The JS API: `window.isAnonymouslyFramed` already reflects whether a document is embedded inside an anonymous iframe or not. This is not reflected in devtool yet, but it could be in the future, if we think this is worth it.
Will this feature be supported on all six Blink platforms (Windows, Mac, Linux, Chrome OS, Android, and Android WebView)?Yes
This is a web platform feature. Consistent behavior among all the platforms is important.Yes
Requires code in //chrome?False
|OriginTrial desktop last||108|
|OriginTrial desktop first||106|
|DevTrial on desktop||105|
|OriginTrial Android last||108|
|OriginTrial Android first||106|
|DevTrial on Android||105|
|OriginTrial webView last||108|
|OriginTrial webView first||106|
Link to entry on the Chrome Platform Statushttps://chromestatus.com/feature/5729461725036544
Links to previous Intent discussionsIntent to prototype: https://groups.google.com/a/chromium.org/g/blink-dev/c/CjrLTguZuO4