Document's "first-party" takes ancestors into account.

Security

I'd like to make a small change to the definition of "first-party" that we use for third-party cookie blocking: we currently look only at the top-level origin to determine the first-party origin for a request. I'd like to start walking the whole ancestor chain of a frame.

Specification

Editor's draft

Status in Chromium

Enabled by default (launch bug) in:

  • Chrome for desktop release 45
  • Chrome for Android release 45
  • Android WebView release 45
  • Opera release 33
  • Opera for Android release 33

Consensus & Standardization

  • Shipped
  • No public signals
  • No public signals
  • Positive

Owner

Last updated on 2015-05-12