Define storage access to be per-page. Handle when the user doesn't explicitly allow or deny. Fixes #3. Fixes #26.

[hober]

No description provided.

[Brandr0id]

The change regarding #26 LGTM.

[annevk]

Thinking about this some more, I think what's missing here is some caching of this state on agent clusters or some such.

In particular, imagine the user opens https://site-a.example/ twice in different browsing context groups (i.e., no opener relation), called 1 and 2. And site-a embeds https://site-b.example/.

So site-b in 1 requests storage access and gets it. If site-b in 2 does hasStorageAccess() at this point it should not have changed, I think. If the user reloads 2, it should have changed.

[hober]

Thinking about this some more, I think what's missing here is some caching of this state on agent clusters or some such.

In particular, imagine the user opens https://site-a.example/ twice in different browsing context groups (i.e., no opener relation), called 1 and 2. And site-a embeds https://site-b.example/.

So site-b in 1 requests storage access and gets it. If site-b in 2 does hasStorageAccess() at this point it should not have changed, I think. If the user reloads 2, it should have changed.

I think you're right. I'd like to address this in a followup patch, if that's okay.

[annevk]

Sure.

[johnwilander]

Looks good. None of my comments are blocking.