🌐 US-Proxy
class="logged-out env-production page-responsive" style="word-wrap: break-word;" >
Skip to content

"create navigation params by fetching" blocks about:blank and data: iframes under COEP #13086

Open

Description

@shannonbooth

What is the issue with the HTML Standard?

Found this by implementing to spec and hitting test failures in:

Which all engines pass.

Issue appears to be 21.13 of https://html.spec.whatwg.org/multipage/browsing-the-web.html#create-navigation-params-by-fetching where if the parent document has COEP enabled, this check blocks about:blank and data: responses. They have no CORP header, so the check treats them as same-origin, and their opaque origin never matches. As a result, the parent can’t navigate an iframe to data:, or to about:blank after the initial one.

Activity

  1. vikas468368-star commented on Oct 17, 2026

    @vikas468368-star
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions