2023-03-29 UTC
# 
benatkin but there's something new coming that will allow me to keep allow-same-origin - credentialless - but it's Chromium-based-only and nonstandard currently https://developer.mozilla.org/en-US/docs/Web/Security/IFrame_credentialless