Testing cross-domain capabilities for embedded partner applications.
Option 1: Reverse Proxy / Co-Hosting
VERDICT: ❌ NOT VIABLE
Issues with IDPs, CSP, and CSRF conflicts. High maintenance burden for deep integration.
Option 2: CHIPS (Partitioned Cookies)
VERDICT: ⚠️ LONG TERM FIX
Allows separate cookie jars per top-level site. Works in Chrome/Edge. Safari support in v26.2.
Status: Testing...
Option 3: Storage Access API (The "Quick Fix")
VERDICT: ✅ RECOMMENDED WORKAROUND
Allows 3rd-party content to request access to first-party storage via user gesture.