Skip to content

Computing cookie partition key in service workers #100

Description

@aselya

As previously mentioned, workers always use their own origin as their site for cookies, regardless of the context they are registered in. This will change when browsers ship storage partitioning, and service workers will derive their site for cookies from their storage key instead of the worker origin. This is a nice improvement to service workers since it prevents workers registered in 3P contexts from becoming SameSite leaks.

Given this effort, it makes sense to specify somehow that partitioned cookies should use the service worker's storage key, not the worker origin, to compute the cookie partition key.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions