Remove --enable-strict-site-isolation

content/public/common/content_switches.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/public/common/content_switches.h"
 
 namespace switches {
 
 // The number of MSAA samples for canvas2D. Requires MSAA support by GPU to
 // have an effect. 0 disables MSAA.
@@ skipping 419 matching lines @@
 const char kEnableSpatialNavigation[]       = "enable-spatial-navigation";
 
 // Enables implementation of the Cache-Control: stale-while-revalidate directive
 // which permits servers to allow the use of stale resources while revalidation
 // proceeds in the background.
 const char kEnableStaleWhileRevalidate[]    = "enable-stale-while-revalidate";
 
 // Enables StatsTable, logging statistics to a global named shared memory table.
 const char kEnableStatsTable[]              = "enable-stats-table";
 
-// Experimentally ensures that each renderer process:
-// 1) Only handles rendering for pages from a single site, apart from iframes.
-// (Note that a page can reference content from multiple origins due to images,
-// JavaScript files, etc.  Cross-site iframes are also loaded in-process.)
-// 2) Only has authority to see or use cookies for the page's top-level origin.
-// (So if a.com iframes b.com, the b.com network request will be sent without
-// cookies.)
-// This is expected to break compatibility with many pages for now.  Unlike the
-// --site-per-process flag, this allows cross-site iframes, but it blocks all
-// cookies on cross-site requests.
-const char kEnableStrictSiteIsolation[]     = "enable-strict-site-isolation";
-
 // Blocks all insecure requests from secure contexts, and prevents the user
 // from overriding that decision.
 const char kEnableStrictMixedContentChecking[] =
     "enable-strict-mixed-content-checking";
 
 // Blocks insecure usage of number of powerful features (geolocation, for
 // example) that we haven't yet deprecated for the web at large.
 const char kEnableStrictPowerfulFeatureRestrictions[] =
     "enable-strict-powerful-feature-restrictions";
 
@@ skipping 280 matching lines @@
 // Defaults to disabled.
 const char kScrollEndEffect[] = "scroll-end-effect";
 
 // Visibly render a border around paint rects in the web page to help debug
 // and study painting behavior.
 const char kShowPaintRects[]                = "show-paint-rects";
 
 // Runs the renderer and plugins in the same process as the browser
 const char kSingleProcess[]                 = "single-process";
 
-// Experimentally enforces a one-site-per-process security policy.
-// All cross-site navigations force process swaps, and we can restrict a
-// renderer process's access rights based on its site.  For details, see:
+// Enforces a one-site-per-process security policy:
+//  * Each renderer process, for its whole lifetime, is dedicated to rendering
+//    pages for just one site.
+//  * Thus, pages from different sites are never in the same process.
+//  * A renderer process's access rights are restricted based on its site.
+//  * All cross-site navigations force process swaps.
+//  * <iframe>s are rendered out-of-process whenever the src= is cross-site.
+//
+// More details here:
 // http://www.chromium.org/developers/design-documents/site-isolation
-//
-// Unlike --enable-strict-site-isolation (which allows cross-site iframes),
-// this flag does not affect which cookies are attached to cross-site requests.
-// Support is being added to render cross-site iframes in a different process
-// than their parent pages.
 const char kSitePerProcess[]                = "site-per-process";
 
 // Skip gpu info collection, blacklist loading, and blacklist auto-update
 // scheduling at browser startup time.
 // Therefore, all GPU features are available, and about:gpu page shows empty
 // content. The switch is intended only for layout tests.
 // TODO(gab): Get rid of this switch entirely.
 const char kSkipGpuDataLoading[]            = "skip-gpu-data-loading";
 
 // Specifies if the browser should start in fullscreen mode, like if the user
@@ skipping 244 matching lines @@
 // Windows Vista and later.
 const char kTraceExportEventsToETW[] = "trace-export-events-to-etw";
 #endif
 
 // Enables the use of NPAPI plugins.
 const char kEnableNpapiForTesting[] = "enable-npapi-for-testing";
 
 // Don't dump stuff here, follow the same order as the header.
 
 }  // namespace switches