Limited Availability Security

Document-Isolation-Policy

The Document-Isolation-Policy HTTP header makes a document cross-origin isolated, giving it access to APIs such as SharedArrayBuffer, without requiring the document or those it embeds to send Cross-Origin-Opener-Policy or Cross-Origin-Embedder-Policy headers.

Baseline Status: This feature is currently Limited (not yet Baseline). Latest engine implementation shipped on Mar 10, 2026.

Desktop Browser Engine Support

Google Chrome

137

Supported

Mozilla Firefox

—

Unsupported

Apple Safari

—

Unsupported

Microsoft Edge

137

Supported

Mobile Browser Engine Support

Chrome Android

146

Firefox Android

—

Safari iOS

—

Specifications and References

Specification ↗ Feature XML ↗

MDN Browser Compat Data Keys:

http.headers.Document-Isolation-Policy ↗