Credentialess iframes

[LeaVerou]

Load third-party resources in <iframe>s using a new, ephemeral context.

Code sample

<iframe credentialless>

MDN URL:

https://developer.mozilla.org/en-US/docs/Web/Security/IFrame_credentialless

Specification URL:

https://html.spec.whatwg.org/multipage/browsers.html#coep-credentialless

Any other links?

• https://developer.chrome.com/blog/iframe-credentialless/
• Can I Use
• Chrome Status
• TAG review

How stable is this feature?

Cutting edge (Shipped, but not in all browsers)

Type of feature

HTML attribute, JS API

What focus area does this feature fall into?

Security & Privacy

Details

Shipped in Chrome, other Browsers do not appear to be opposed, but do not appear to be actively working on implementing either.