Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Computing cookie partition key in service workers #10

Open
DCtheTall opened this issue Jan 4, 2023 · 0 comments
Open

Computing cookie partition key in service workers #10

DCtheTall opened this issue Jan 4, 2023 · 0 comments

Comments

@DCtheTall
Copy link
Member

DCtheTall commented Jan 4, 2023

At the time of writing this, workers always use their own origin as their site for cookies, regardless of the context they are registered in. This will change when browsers ship storage partitioning, and service workers will derive their site for cookies from their storage key instead of the worker origin. This is a nice improvement to service workers since it prevents workers registered in 3P contexts from becoming SameSite leaks.

Given this effort, I think that it makes sense to specify somehow that partitioned cookies should use the service worker's storage key, not the worker origin, to compute the cookie partition key.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant