Permissions-Policy: storage-access

The HTTPPermissions-Policyheaderstorage-accessdirective controls whether a document loaded in a third-party context (i.e. embedded in an<iframe>) is allowed to use theStorage Access APIto request access to unpartitioned cookies.

This is relevant to user agents that by default block access to unpartitioned cookies by sites loaded in a third-party context to improve privacy (for example, to prevent tracking).

Specifically, where a defined policy blocks use of this feature,Document.requestStorageAccess()calls will return aPromisethat rejects with aDOMExceptionof typeNotAllowedError.

Permissions-Policy:storage-access=<allowlist>;