Ari Chivukula

Prevent cross-origin sensitive header probing

8

The goal of this algorithm is to prevent cross-origin requests from probing the size of sensitive headers (`Authorization` or `Cookie`) by adding headers to cross-site requests until the total size...

Merging Client Hints Infrastructure into FETCH (and HTML) Standards

1

The primary conversation/description for this task lives in HTML at whatwg/html#7568. This is a stub because the proposal concerns FETCH too.

Wildcards in Permissions Policy Origins

2

## Request for position on an emerging web specification * WebKittens who can provide input: @johnwilander ### Information about the spec * Spec Title: Wildcards in Permissions Policy Origins *...

Consider standardizing 7-day max-age cap for cookies set via JavaScript

2

Two browsers are already doing this ([Safari](https://webkit.org/blog/8613/intelligent-tracking-prevention-2-1/) and [Brave](https://brave.com/privacy-features/#:~:text=Brave%20caps%20the%20life%20of,clear%20cookies%20at%20any%20time.)). It might be worth documenting in the standard.

Extending Storage Access API (SAA) to non-cookie storage

9

### Title of the spec Extending Storage Access API (SAA) to non-cookie storage ### URL to the spec https://privacycg.github.io/saa-non-cookie-storage/ ### Issue Tracker URL https://crbug.com/1484966 ### TAG Design Review URL https://github.com/w3ctag/design-reviews/issues/906...

### Title of the spec Opener Storage Partitioning ### URL to the spec https://arichiv.github.io/opener-storage-partitioning/ ### URL to the spec's repository https://github.com/arichiv/opener-storage-partitioning/ ### Issue Tracker URL https://crbug.com/1159586 ### TAG Design Review...

Add hasUnpartitionedCookieAccess

6

### Description This is the first of 3 PRs adding spec changes from https://privacycg.github.io/saa-non-cookie-storage/ launching in Chrome 125. ### Motivation hasUnpartitionedCookieAccess is a renaming of hasStorageAccess intended to provide more...

navigator.cookieEnabled in third-party contexts

10

The attribute [navigator.cookieEnabled](https://html.spec.whatwg.org/multipage/system-state.html#cookies) is “true if the user agent attempts to handle cookies according to HTTP State Management Mechanism” according to the spec, and in first-party contexts this holds true...

Add StorageAccessHandle

3

### Description This is the third of 3 PRs adding spec changes from https://privacycg.github.io/saa-non-cookie-storage/ launching in Chrome 125. ### Motivation StorageAccessHandle can be returned by requestStorageAccess when a types argument...

Storage Access API Extension

1

### Proposal Add support for: https://privacycg.github.io/saa-non-cookie-storage/ ### Browser support Chrome 125+ ### Tasks - [ ] hasUnpartitionedCookieAccess - [x] SharedWorker - [ ] requestStorageAccess ### Dependencies _No response_ ### Additional...