4 ms·
Not quite, it's a different axis. Security tokens in firefox contain the domain of the actual request/resource they are related to (e.g. the domain of an iframe
by the8472 8y ago
Not quite, it's a different axis. Security tokens in firefox contain the domain of the actual request/resource they are related to (e.g. the domain of an iframe) and a bag of data called originAttributes. Containers are one value in that bag. The top level window domain (1st-party) is added as another value if you enable FPI.
- bugmen0t 8y agoThis paper has all the gory details: https://www.researchgate.net/publication/315848178_Extending_the_Same_Origin_Policy_with_Origin_Attributes https://www.researchgate.net/publication/315848178_Extending...