cookie-store icon indicating copy to clipboard operation
cookie-store copied to clipboard

Add support for partitioned cookies to CookieStore.

Open DCtheTall opened this issue 4 years ago • 3 comments


Preview | Diff

DCtheTall avatar Sep 15 '21 19:09 DCtheTall

This PR is a change to the CookieStore API spec to support partitioned cookies.

These changes could be used to support the Partitioned attribute, a.k.a. CHIPS.

There is an open PR in the CHIPS repository adding a note about these changes to the explainer.

DCtheTall avatar Sep 15 '21 19:09 DCtheTall

One quick addendum: if user agents implement service worker partitioning (ref) then the cookie's partition key should be the site of the worker's partition key.

If user agents don't implement storage partitioning, then partitioned cookies may need to be blocked in service workers. Otherwise, service workers could use partitioned cookies as a cross-site identifier. See the CHIPS explainer for more detail.

Service worker partitioning is also mentioned in more detail in this proposal.

DCtheTall avatar Sep 16 '21 16:09 DCtheTall

I put together a CL that implements these changes in Chromium.

DCtheTall avatar Oct 07 '21 21:10 DCtheTall