privacycg / storage-access

The Storage Access API

https://privacycg.github.io/storage-access/

privacycg/storage-access Issues

Expand storage-access-preserving navigations to include same-origin-initiated navigations, not just self-initiated.
Updated 2 months ago16
Top-level calls to navigator.permissions.query for SAA should probably return "granted"
Updated 3 months ago4
Feature request: Auto-grant storage access without requiring user interaction or explicit API call in cases determined to be safe
Updated 3 months ago4
Unable to acccess third party cookies values - SAP Successfactors, SAP BTP, CHIPS
Updated 4 months ago1
Potentially specify "prior user interaction" requirement
Updated 4 months ago1
Unable to request storage API access from hosting app to set cookies from iframe
Closed 4 months ago3
Use case validation - iframe using third party cookies as part of the requests
Updated 5 months ago1
Support FedCM-based grants
Updated 5 months ago1
Simplify WebDriver API for blocking cross-site cookies
Updated 5 months ago7
Feature Request: Allow an iframe to request Storage Access permission before the user has visited the origin at the top level
Updated 6 months ago6
How does storage access interact with Dedicated, Shared and Service Workers?
Updated 7 months ago38
Possibly don't require user interaction to call requestStorageAccess
Closed 8 months ago1
How can I reset the Storage Access API "previous interaction" state in Chrome?
Closed 8 months ago2
server side access (HTTP `Cookie` header) to cookies (`Lax`) inside iframe
Closed 8 months ago4
FR: Request header to indicate storage access
Updated 9 months ago8
Feature request: Auto-grant iFrame without requiring iFrame reload after grant
Updated 10 months ago1
Cookie store changes unspecified
Updated a year ago1
Regression: consulting permission state from a task's steps
Closed a year ago
Avoid using the permissions task source directly
Closed a year ago1
Reloading frame after granted storage access to enable efficient site isolation
Updated a year ago8
FedCM vs Storage Access API use case
Closed a year ago2
[Per-frame] Permission grants are usable by cross-site iframes
Updated a year ago2
Shared worker use cases doesn't seem to work
Closed a year ago3
Definition of Unpartitioned data incorrect/inconsistent
Updated a year ago
Request Storage access Page Security model
Updated a year ago2
Clarify intended semantics of `document.hasStorageAccess`
Closed a year ago5
Storage Access API (requestStorageAccess)
Closed a year ago7
Fix references to un-exported definitions in other specs.
Updated a year ago2
FR: Ability for a frame to indicate on initial load that storage access is required
Updated a year ago3
clarify the capability such that users can understand prompt and give permission
Updated a year ago2
Request Access for WebSockets?
Closed a year ago1
hasStorageAccess() deals with promises in parallel
Closed a year ago2
hasStorageAccess() always queues a task to resolve with the environment's boolean?
Closed a year ago8
Synchronous hasStorageAccess?
Closed a year ago4
Clarify browser specific divergence with requestStorageAccess
Closed a year ago4
Use (top-level site, embedded site) permissions
Closed a year ago
Editorial: Consider removing implementation-defined steps because we have requesting permission to use
Closed 2 years ago1
permissions.query() tests
Closed 2 years ago1
Editorial: Remove comments referencing lines of code
Closed 2 years ago
Adapt changes to navigation to session history rewrite
Closed 2 years ago5
Consider restricting storage access scope back to per-frame
Closed 2 years ago16
Promise resolution in "determine the storage access policy" seems wrong?
Closed 2 years ago6
Editorial: stop using first/third-party as terms
Updated 2 years ago
Consider building on top of Permissions instead of using the "storage access map"
Closed 2 years ago2
Should we expose "denied" storage access permissions?
Updated 2 years ago
Improve testing story
Closed 2 years ago9
Specify revocation of storage access through Clear-Site-Data
Closed 2 years ago3
State checks are inconsistent between rSA and hSA
Closed 2 years ago
Restrict to secure context
Closed 2 years ago1
I'm somewhat concerned about giving websites the ability to revoke permissions. It seems this could lead to a confusing user experience where the user ends up seeing the same dialog over and over.
Closed 2 years ago1