Storage Test Page

Everything below runs on load. Reload to see whether values persisted.

\n\n

1. First-Party Storage (this page)

Set directly by this page, so it belongs to this origin.

\n \n \n \n

Storage	Status	Value	Detail
Running…

\n\n

2. Iframe Storage (third party: `__IFRAME_LABEL__`)

Set by the framed page below, on a different domain, which reports its results\n up to this page.

\n \n \n \n

Storage	Status	Value	Detail
Waiting for the iframe…

The frame itself:

\n \n\n

3. Third-Party Cookie via wpt.live

The first frame asks wpt.live to set\n __WPT_COOKIE_NAME__=__WPT_COOKIE_VALUE__ with\n SameSite=None; Secure. The second frame then asks wpt.live which\n cookies it actually received.

Empty {} means the third-party cookie was blocked.

\n\n

Setter frame (set.py):

\n \n\n

Verification frame (list.py) — cookies wpt.live received:

\n \n

\n\n

Other pages

/read — read everything back without writing anything

\n\n \n \n\n `;\n\n// The framed page. Served cross-origin this is a third-party context, so every\n// access is wrapped — blocked storage throws rather than returning null.\nconst readHtml = `\n\n\n \n \n \n Read Storages\n \n \n \n

Read Cross Session Storages

This page only reads. Nothing here writes a cookie or a storage,\n so a reload cannot accidentally recreate what you are testing for.

Visit / first, then come back here (or after clearing state /\n waiting out a protection window) to see what survived.

\n\n

1. First-Party Storage (this origin)

\n \n \n \n

Storage	Status	Value	Detail
Reading…

\n\n

2. Iframe Storage (third party: `__IFRAME_LABEL__`)

The framed page below reads its own storage and reports back. It writes nothing.

\n \n \n \n

Storage	Status	Value	Detail
Waiting for the iframe…

The frame itself:

\n \n\n

3. Third-Party Cookie via wpt.live

Asks wpt.live which cookies it receives — list.py only, no setter.

Empty {} means the third-party cookie is gone or was never set.\n Look for __WPT_COOKIE_NAME__.

\n \n

\n\n

Other pages

/ — set first-party, iframe and wpt.live storages

\n\n \n \n\n `;\n\nconst writeHtml = `\n\n\n \n \n \n Write Storages\n \n \n

Write Storages for Cross Session Testing

\n\n \n

\n\n \n\n

Storage Verification

\n \n

IndexedDB Status: Checking...

\n \n\n `;\n\nconst styleCss = `\nbody {\n font-family: sans-serif;\n background: #f9f9f9;\n color: #222;\n margin: 2rem;\n}\n\nh1 {\n color: #3366cc;\n}\n`;\n\nconst scriptJs = `\n\n`;\n// Learn more: https://docs.val.town/vals/http/\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (url.pathname === \"/write\") {\n return new Response(writeHtml, {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n }\n\n if (url.pathname === \"/read\") {\n const body = readHtml\n .replace(\"__IFRAME_READ_SRC__\", STORAGE_IFRAME_READ_URL)\n .replace(\"__IFRAME_LABEL__\", STORAGE_IFRAME_ORIGIN)\n .replace(\"__WPT_LIST_URL__\", WPT_LIST_URL)\n .replace(\"__WPT_COOKIE_NAME__\", WPT_COOKIE_NAME);\n\n return new Response(body, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n },\n });\n }\n\n if (url.pathname === \"/style.css\") {\n return new Response(styleCss, {\n headers: { \"content-type\": \"text/css; charset=utf-8\" },\n });\n }\n\n if (url.pathname === \"/script.js\") {\n return new Response(scriptJs, {\n headers: { \"content-type\": \"application/javascript; charset=utf-8\" },\n });\n }\n\n if (url.pathname === \"/\") {\n const body = landingHtml\n .replace(\"__IFRAME_SRC__\", STORAGE_IFRAME_WRITE_URL)\n .replace(\"__IFRAME_LABEL__\", STORAGE_IFRAME_ORIGIN)\n .replace(\"__WPT_SET_URL__\", WPT_SET_URL)\n .replace(\"__WPT_LIST_URL__\", WPT_LIST_URL)\n .replace(\"__WPT_COOKIE_NAME__\", WPT_COOKIE_NAME)\n .replace(\"__WPT_COOKIE_VALUE__\", WPT_COOKIE_VALUE);\n\n return new Response(body, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n },\n });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","deleted","label",[118],"pulls","branches",1,"forks","envVars",{"_141":42,"_143":42},"connections",{"_141":42,"_142":42},"count","unfilledCount","emptyCount",{"_18":117,"_20":118,"_119":36,"_120":-5,"_121":68,"_122":66,"_123":38,"_22":145,"_65":125,"_126":127,"_128":129,"_130":26,"_131":21,"_146":147,"_86":148},["D",1785501238696],"children",[],[118],["D",1785497381583],{"_16":17,"_84":80},{"_16":17,"_77":78,"_79":80,"_33":34,"_81":82,"_83":26},{"_65":66,"_20":67,"_18":68,"_69":19,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":21,"_76":17},"ctx",{"_58":-5,"_104":186,"_187":188,"_189":190,"_191":26,"_192":26,"_193":26,"_194":38,"_195":-5,"_196":-7,"_197":-7,"_198":42,"_199":26,"_200":26,"_201":-5,"_202":26,"_203":26,"_204":26,"_205":-5},"ENV",{"_157":158,"_159":160,"_161":67,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Storage Test Page

1. First-Party Storage (this page)

2. Iframe Storage (third party: __IFRAME_LABEL__)

3. Third-Party Cookie via wpt.live

Other pages

Read Cross Session Storages

1. First-Party Storage (this origin)

2. Iframe Storage (third party: __IFRAME_LABEL__)

3. Third-Party Cookie via wpt.live

Other pages

Write Storages for Cross Session Testing

Storage Verification

2. Iframe Storage (third party: `__IFRAME_LABEL__`)

2. Iframe Storage (third party: `__IFRAME_LABEL__`)

Search