v139 · miscellaneous

Web app scope extensions

Adds a "scope_extensions" web app manifest field that enables web apps to extend their scope to other origins.

concepts

  1. Scope Extensions Manifest

    Web app manifests can declare additional origins as part of the app's scope. Navigations between scoped origins stay inside the installed window instead of opening a browser tab.

  2. Origin Association

    Walks the two-sided handshake: the primary app declares the partner, the partner serves /.well-known/web-app-origin-association to consent. Edit either origin and see the documents update.

  3. Multi-Origin App Map

    Type in your real product surface — regional CDN, billing portal, support, partner embed — plus a test attacker origin. The verdict map, manifest fragment, and per-origin association files all generate live.

  4. PWA Scope Inspector

    Edit a manifest JSON with scope and scope_extensions. Type any URL and instantly see whether it's in-scope, which rule matches, and what the required web-app-origin-association file must contain for cross-origin entries. A live scope-map diagram shows the home origin and extended origins as connected nodes.

why it shipped

Web app scope (defined by the scope field) can only be defined with a path from a single origin. It is used to determine whether an app window's current document is a part of the app. It also determines what URLs are allowable in other manifest members.

references