Isolate SharedWorker by first party domain
We may be able to write a C++ patch that isolates SharedWorker's by first party domain. For now, we are probably going to disable SharedWorkers by a pref.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information