Safari share-sheet icon bisect

Open each in iPad Safari, tap Share, note icon vs compass.

  1. v0 control: afterpathviewer.app as served
  2. v1 no Cross-Origin-Embedder-Policy
  3. v2 no Trusted Types enforcement (header and meta)
  4. v3 no meta CSP (header CSP only)
  5. v4 no meta CSP, no COEP, no Origin-Agent-Cluster etc.
  6. v5 same head, no app script, all headers
  7. v6 same head, no app script, no COEP
  8. v7 COEP kept, icons sent with CORP cross-origin