[Webkit-unassigned] [Bug 218396] ITP doesn't grant storage access to nested iframe unless first-party interaction is prompted by top frame

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Nov 2 11:09:37 PST 2020


https://bugs.webkit.org/show_bug.cgi?id=218396

--- Comment #3 from Kelvin Liu <kliu at tribpub.com> ---
Thanks for the quick reply. I don't think we can use Storage Access API. As I understand it, that API requires the iframe which requests access to be visible so that the request can be triggered via a user interaction in that iframe (e.g. click a button).
The AMP framework hides our iframe, so interaction is impossible - AMP uses postMessage to communicate with it.

Since the Storage Access API probably won't work for us, I plan to use `fetch` to communicate with the server instead, using a token that the iframe has access to.

==> My question in this case is: can I rely on the iframe's localStorage to continue to be capped at 7 days, or will this be further restricted in the near future? I plan to use this as a temporary cache so I won't need to fetch from the server so often.

==> Is there a roadmap for ITP that I can view to anticipate changes?

Thanks!

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20201102/2c5e443d/attachment.htm>


More information about the webkit-unassigned mailing list