demo · v132
Storage Key triplet explorer
A frame mints a blob URL. Who else in the page can fetch it? The answer in Chrome 132 is "anyone with the same Storage Key" — the triple of top-level site, frame origin, and the has-cross-site-ancestor flag. Pick a scenario and inspect every frame's key against the minter.
scenario
storage keys per frame
A match means the frame can fetch() the blob URL. A miss means Chrome 132 rejects with net::ERR_BLOCKED_BY_RESPONSE. Note that has-cross-site-ancestor flips when ANY ancestor is cross-site, so A > B > A nests as (news.example, news.example, true) — not equal to the top-frame key.