FWIW, setting privacy.firstparty.isolate to 'true' in Firefox prevents this from... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		c0nducktr on May 11, 2018 \| parent \| context \| favorite \| on: Google YOLO clickjacking FWIW, setting privacy.firstparty.isolate to 'true' in Firefox prevents this from working.

ehsankia on May 11, 2018 [–]

I believe site isolation in Chrome also does this

https://www.chromium.org/Home/chromium-security/site-isolati...

Ajedi32 on May 11, 2018 | [–]

I don't think so. Chrome's site isolation just isolates different origins in different browser processes, whereas Firefox's first party isolation is intended to isolate _cookies_.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact