Skip to content
This repository has been archived by the owner on Jul 31, 2023. It is now read-only.

SharedArrayBuffer usage is restricted to cross-origin isolated sites #347

Open
maelswarm opened this issue Apr 20, 2021 · 0 comments
Open

Comments

@maelswarm
Copy link
Contributor

SharedArrayBuffers (SABs) can be used to construct high-resolution timers. High-resolution timers simplify Spectre attacks on cross-origin resources.

To mitigate security risks across browsers, SharedArrayBuffers are gated behind cross-origin isolated contexts starting with Chrome 91 (May 2021). To continue using SharedArrayBuffers, please ensure that this page opts-into cross-origin isolation by setting Cross-Origin-Opener-Policy and Cross-Origin-Embedder-Policy appropriately.

Note that for each iframe, only the first issue is reported for performance reasons.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant