Cross origin isolation option

[HKalbasi]

--coiso flag can send coop and coep headers, Which useful for webassembly thread enabling.

More info about coop and coep

• What is coop and coep
• Why coop and coep is needed

[thornjad]

There are a handful of PRs implementing custom headers (which I need to consolidate). If custom headers could be specified, would that achieve this?

[HKalbasi]

Somehow.

This is the future security standard, something like secure context, and many features of browser will be depend on this. Custom headers would make it possible but annoying, amount of annoyance depend on custom header proposal, for example long cli flags are really annoying.

Even better than a special cli flag like --coiso or --coop, would be making it default. It seems that majority of websites should adopt this (again, like secure context) and broken cases are rare (the most common one is oauth pop-up) so making it default is a valid move (Surely with a --no-coiso for disabling it). But it will be a breaking change and this is enough for not doing it. In this case I think this is common enough and worth a special flag (like existing -c and --cors flags that have special flags)

[github-actions]

This issue has been inactive for 180 days

[HKalbasi]

It is still a problem to be solved. There are two PR for it but still not merged.

[github-actions]

This issue has been inactive for 180 days

[connorjclark]

For people just needing a solution now, try npx statikk --port 8000 --coi.

[vapier]

ugh, i posted a 3rd PR for this issue. can someone please look at merging one of them ?

[PoignardAzur]

Seconded. This is an essential feature for my use-case.