Turn on enforcements based on tracking the list of committed origins in ChildProcessSecurityPolicy::CanAccessMaybeOpaqueOrigin() see https://issues.chromium.org/issues/40148776 Enable kUseBrowserCalculatedOrigin by default (will be activated by default with 133) see https://issues.chromium.org/issues/40092527