There is standardization work ongoing that enables developers to create SharedArrayBuffer
objects again, but changes are needed in order to be use these across threads (i.e., postMessage()
for SharedArrayBuffer
objects throws by default). These changes provide further isolation between sites and help reduce the impact of attacks with high-resolution timers, which can be created with shared memory.
Note: Starting with Firefox 79, the features described in this document are enabled by default.
Chrome started enforcing these restrictions starting with Chrome 92 on desktop and Chrome 88 on Android.