SharedWorker violates first party isolation
Running a SharedWorker from an iframe allows passing of information via JavaScript between two websites. Here's a demo, where two tabs from different domains share uniquely identifying information. The first tab generates a random number, and the second tab displays the same random number.
https://arthuredelstein.github.io/tordemos/sharedworker-parent.html
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information