Tweet · 20 Aug 2021, 18:59 UTC

I wonder if there's a response header that sites could send to tell in-app browsers and their close cousin Chrome with Sync "you can't steal the data from here."