demo · v132

Top-level navigation vs subresource fetch

v132 partitions blob URLs by storage key for both fetching and navigation. A blob: URL minted on this page can be: (a) fetched here (same key, allowed), (b) window.open-ed here (allowed) and (c) navigated by an iframe whose top-level differs — that's where the new rule bites.