← Back to release summary

Block iframe contexts navigating to filesystem: URLs

Category
File APIs
Type
Feature removal
Status
Enabled by default (Chrome 104)
Intent stage
Shipped

Summary

Render-initiated navigations to filesystem:// URLs are blocked in top-level frames, but for some reason allowed in iframes. As part of the storage partitioning efforts, we propose to remove support for third party contexts, and consistently block navigation to filesystem:// URLs everywhere. See https://chromestatus.com/metrics/feature/timeline/popularity/4077 for usage details (currently extremely low).

Motivation

Render-initiated navigations to filesystem:// URLs are blocked in top-level frames, but for some reason allowed in iframes. As part of the storage partitioning efforts, we propose to remove support for navigation to filesystem:// URLs in third party contexts.

Standards & signals

View on chromestatus.com