-
Notifications
You must be signed in to change notification settings - Fork 2.7k
Closed
brave/brave-core
#12686Labels
Milestone
Description
Currently blob are accessible via URLs generated from URL.createObjectURL
in a third-party context. We should partition the storage in a way that blobs can't be accessed in 3p context via URL generated in 1p context.
See also https://privacytests.org/ for blob storage partitioning test.