caption: Enable Site Isolation for specified origins on Android devices (deprecated)
deprecated: true
desc: |-
  Setting the policy means each of the named origins in a comma-separated list runs in a dedicated process on <ph name="ANDROID_NAME">Android</ph>. Each named origin's process will only be allowed to contain documents from that origin and its subdomains. For example, specifying https://a1.example.com/ allows https://a2.a1.example.com/ in the same process, but not https://example.com or https://b.example.com. Note that <ph name="ANDROID_NAME">Android</ph> isolates certain sensitive sites by default starting in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> version 77, and this policy extends that mode to isolate specific additional origins.

  Since <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> 77, you can also specify a range of origins to isolate using a wildcard. For example, specifying https://[*.]corp.example.com will give every origin underneath https://corp.example.com its own dedicated process, including https://corp.example.com itself, https://a1.corp.example.com, and https://a2.a1.corp.example.com.

  Note that origins isolated by this policy will be unable to script other origins in the same site, which is otherwise possible if two same-site documents modify their document.domain values to match. Administrators should confirm this uncommon behavior is not used on an origin before isolating it.

  Setting the policy to an empty string or leaving it unset means site isolation won't be required for any specific origins. Users can still turn on process isolation manually, through the command line flag.

  Note: This policy is deprecated, use <ph name="ISOLATE_ORIGINS_POLICY_NAME">IsolateOrigins</ph> (for high-performance devices) or <ph name="ISOLATE_ORIGINS_SHORTLIST_POLICY_NAME">IsolateOriginsShortlist</ph> instead. This policy applies only to Chrome on <ph name="ANDROID_NAME">Android</ph> running on devices with strictly more than 1 GB of RAM which are not recommended to configure any process isolation specifically.
example_value: https://a.example.com/,https://othersite.org/,https://[*.]corp.example.com
features:
  dynamic_refresh: false
  per_profile: false
owners:
- alexmos@chromium.org
- creis@chromium.org
schema:
  type: string
supported_on:
- android:68-
tags:
- system-security
type: string
