Feature Policy control over document.domain

Category: Security
Type: New or changed feature
Status: Enabled by default (Chrome 77)
Intent stage: Prepare to ship

Summary

The document-domain policy governs access to document.domain. It is enabled by default, and, if disabled, attempting to set document.domain will throw an error.

Standards & signals

Specification: https://github.com/whatwg/html/pull/4170
Firefox: In development
Safari: No signal
Web developers: No signals
Tracking bug: https://crbug.com/904351

Docs: https://github.com/WICG/feature-policy/issues/241

Explainers: https://github.com/w3c/webappsec-feature-policy/issues/241

View on chromestatus.com