Beta version of “Google Chrome 106”
On September 1 (local time), Google announced the new features and changes added to the “Google Chrome 106” beta. Chrome 106 will support new features for developers such as “Anonymous iframes” and “Pop-Up API”.
Some web APIs, such as SharedArrayBuffer, have been shown to increase the risk of side channel attacks like Specter. As such, modern web browsers can enable a condition called “isolation of common origin” by sending a header like “Cross-Origin-Embedder-Policy” (COEP). It restricts the loading of resources across assets (more or less scopes, but not strictly speaking), and makes it possible to use these APIs safely.
However, when cross-origin isolation is enabled, third party frames (iframes) that do not support “COEP” cannot be loaded. On the other hand, giving up “COEP” just to read third-party frames isn’t a good idea either.
This is where “Anonymous iframes” was introduced (