demo · v132

Why DIP exists: the COOP problem with popups

COOP+COEP gives you SharedArrayBuffer, but it shatters cross-origin opener relationships and demands every subresource carry CORP. DIP keeps the SAB unlock and walks away from both costs. Walk a real flow — opener ↔ popup, embedded analytics — and watch which paths break.

scenario A: opener window.open(‘https://oauth.example/start’)

scenario B: 3rd-party analytics iframe (no CORP)

request that builds the document


  

see also