OriginAgentClusterDefaultEnabled

Allows origin-keyed agent clustering by default.

Supported on:

  • Chrome (Windows) since version 100

Description:

This policy allows origin-keyed agent clustering by default.

The Origin-Agent-Cluster HTTP header controls whether a document is isolated in an origin-keyed agent cluster, or in a site-keyed agent cluster. This has security implications since an origin-keyed agent cluster allows isolating documents by origin. The developer-visible consequence of this is that the document.domain accessor can no longer be set.

The default behaviour - when no Origin-Agent-Cluster header has been set - changes in M111 from site-keyed to origin-keyed.

If this policy is enabled or not set, the browser will follow this new default from that version on.

If this policy is disabled this change is reversed and documents without Origin-Agent-Cluster headers will be assigned to site-keyed agent clusters. As a consequence, the document.domain accessor remains settable by default. This matches the legacy behaviour.

true = By default, documents may be put in origin-keyed agent clusters. document.domain is not settable for such documents.
false = By default, documents are put in site-keyed agent clusters. document.domain remains settable.

Supported features:

  • Applied to browser without restart. Note that some ongoing tasks may not be affected.
  • Applied at Samsung Browser profile level.

Data type:

Boolean
Windows:REG_DWORD

Windows registry location:

Software\Policies\Samsung\Internet\OriginAgentClusterDefaultEnabled

Example value:

0x00000000

More policies under Miscellaneous: