Web features explorer

Credentialless iframes

Limited availability

The credentialless attribute for the <iframe> HTML element loads third-party content in an ephemeral context and does not send any credentials such as cookies. When using cross-origin isolation, this allows you to embed content that does not send Cross-Origin-Embedder-Policy headers.

Browser support

  • Chrome 110 Released on 2023-02-07
  • Chrome Android 110 Released on 2023-02-07
  • Edge 110 Released on 2023-02-09
  • Firefox Not supported Position (concerns: venue)
  • Firefox for Android Not supported Position (concerns: venue)
  • Safari Not supported
  • Safari on iOS Not supported
👍
4

Need this feature?
Leave a 👍 on the feedback issue
Don't forget to also leave a comment explaining your specific use case.

MDN documentation

Specifications

Usage (according to Chrome Platform Status)

~0.091% of page loads. More data at chromestatus.com.

Web Platform Tests (WPT)

View the latest WPT test results for this feature

View as JSON | Edit this feature | Report an issue | Web-features entry: source, dist