← back to v141 · strict-same-origin-policy-for-storage-access-api

conformance · v141

v141 · strict-same-origin-policy-for-storage-access-api — conformance probe

6 assertions drawn from the spec. Each is a single contract the spec text makes. Pass/fail reflects what this browser executed; blocked means the contract was not run because it needs user mediation, hardware, or another unavailable precondition. Open the page in Chrome stable / canary / Firefox / Safari to compare.

browser: spec: https://privacycg.github.io/storage-access/ chromestatus: #5169937372676096 generated 2026-06-01T08:13:08Z by conformance-author-v1-subagent
0
pass
0
fail
0
blocked
6
total
id contract kind verdict detail
requeststorageaccess-exists Document.prototype.requestStorageAccess is the API whose semantics now follow strict same-origin instead of same-site. typeof
hasstorageaccess-exists Document.prototype.hasStorageAccess returns a Promise<boolean>; the strict same-origin change affects what counts as 'has'. typeof
request-storage-access-for Document.prototype.requestStorageAccessFor is the top-level surface used by sites to request access on behalf of an origin (the spec narrows what is granted). script
cookie-store-api CookieStore is exposed; cookie attachment to subresource requests is the underlying behaviour the Storage Access API gates. exists
origin-property-of-location location.origin returns a string origin (scheme + host + port), the unit of comparison under strict same-origin policy. script
permissions-storage-access navigator.permissions.query accepts the storage-access descriptor name (used to check policy after the strict change). script