The Site Isolation page[0] states: > This protection is made possible by the following changes in Chrome's behavior: > […] > - Cross-site "documents" (specif

The Site Isolation page[0] states: > This protection is made possible by the following changes in Chrome's behavior: > […] > - Cross-site "documents" (specifically HTML, XML, and JSON files) are not delivered to a web page's process unless the server says it should be allowed (using CORS). I understand it to mean that the tab's process used to hold code that verified the CORS header, and that the verification is now out-of-process. [0]: http://www.chromium.org/Home/chromium-security/site-isolation http://www.chromium.org/Home/chromium-security/site-isolatio...