Site-controlled content

Email:
Password:

UCC iframe: Same origin, same domain

This is expected to be treated as same origin. Autofill is expected here. Websites are expected to use different origin for UCC. Page URL.

No sandbox
sandbox="allow-same-origin"
sandbox (all restrictions)

UCC iframe: Different origin, same domain

This is expected to be treated as different origin. Page URL.

No sandbox
sandbox="allow-same-origin"
sandbox (all restrictions)

UCC iframe: Different origin, different domain

This is expected to be treated as different origin. Page URL.

No sandbox