New Forge manifest schema addition for browser storage access
- Announced
- APIs
- forge-core-platform
- Severity
- notable, set by
reef/atlassian-rule-v1 - Source
- https://developer.atlassian.com/changelog/#CHANGE-3297
Forge Custom UI: Browser Storage Access support
Forge Custom UI apps can now opt in to the Storage Access API by declaring in their manifest.yml.
permissions:
sandbox:
- "allow-storage-access-by-user-activation"When enabled, the app's iframe will include the allow-storage-access-by-user-activation sandbox attribute, allowing the app to request access to unpartitioned cookies via the Storage Access API (document.requestStorageAccess()) after a user gesture. This is useful for apps that need access to browser storage in contexts where third-party storage is blocked by default. Requirements: • App must opt in explicitly via the new allowStorageAccessByUserActivation permission
The text above is Atlassian's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.