WPT
wpt / storage-access-api / storage-access-headers.tentative.https.sub.window.html
Spec: The Storage Access API ↗
Runs: Chrome 155.0.8039.0 (wpt@d0c38285b, 2026-09-03) | Firefox 157.0a1 (wpt@ed1909ed6, 2026-09-03) | Safari 251 preview (wpt@5ce815a83, 2026-08-27) | Ladybird 1.0-a9df8 (wpt@0ea9f2aac, 2026-09-03) | Servo Servo 0.6 (wpt@09159dcb3, 2026-09-02) | Blitz 188486089 (wpt@a95401e4e, 2026-09-02)
View on the Blitz WPT dashboard | Open test on wpt.live | wpt.fyi
| Chrome | Firefox | Safari | Ladybird | Servo | Blitz | |
|---|---|---|---|---|---|---|
| Total | 3/17 | 4/17 | 2/17 | 1/17 | 1/17 | NOT RUN |
| Subtest | Chrome | Firefox | Safari | Ladybird | Servo | Blitz |
|---|---|---|---|---|---|---|
| Sec-Fetch-Storage-Access is omitted when credentials are omitted | PASS | PASS | PASS | PASS | PASS | — |
| Activate-Storage-Access `load` header grants storage access to frame. | PASS | PASS | FAIL | TIMEOUT | TIMEOUT | — |
| Activate-Storage-Access `load` is honored for `active` cases. | PASS | PASS | FAIL | NOTRUN | NOTRUN | — |
| Sec-Fetch-Storage-Access is `active` by default for cross-site requests. | FAIL | PASS | — | — | — | — |
| Sec-Fetch-Storage-Access is `none` when unpartitioned cookies are unavailable. | — | — | FAIL | — | — | — |
| Sec-Fetch-Storage-Access is `inactive` when unpartitioned cookies are available but not in use. | — | — | FAIL | — | — | — |
| Sec-Fetch-Storage-Access is `active` after a valid retry with matching explicit allowed-origin. | — | — | FAIL | — | — | — |
| Sec-Fetch-Storage-Access is active after retry with wildcard `allowed-origin` value. | — | — | FAIL | — | — | — |
| 'Activate-Storage-Access: retry' is a no-op on a request without an `allowed-origin` value. | — | — | FAIL | — | — | — |
| 'Activate-Storage-Access: retry' is a no-op on a request from an origin that does not match its `allowed-origin` value. | — | — | FAIL | — | — | — |
| Activate-Storage-Access `retry` is a no-op on a request with a `none` Storage Access status. | — | — | FAIL | — | — | — |
| Activate-Storage-Access `load` header is a no-op for requests without storage access. | — | — | PASS | — | — | — |
| Sec-Fetch-Storage-Access is `inactive` for ABA case. | — | — | FAIL | — | — | — |
| Storage Access can be activated for ABA cases by retrying. | — | — | FAIL | — | — | — |
| Sec-Fetch-Storage-Access maintains value on same-origin redirect. | — | — | FAIL | — | — | — |
| Sec-Fetch-Storage-Access is not 'active' after cross-origin same-site redirection. | — | — | FAIL | — | — | — |
| Sec-Fetch-Storage-Access loses value on a cross-site redirection. | — | — | FAIL | — | — | — |
| Activate-Storage-Access retry is handled before any redirects are followed. | — | — | FAIL | — | — | — |