Containment test chamber

Probe parent access, storage, network and worker isolation with harmless local controls.

How this experiment works

An opaque-origin iframe and a disposable worker run under a restrictive Content Security Policy. A positive control verifies the canary first.

What it does not prove

Passing browser checks does not establish a host air gap or prevent every browser vulnerability. Host controls need separate tests.

Try this challenge

Inspect why a blocked request differs from a failed server. What evidence supports each result?

Related Trust Agent courses · Sources and licences

Enable JavaScript to run the experiment on your device.