Site isolation

Each site is given its own renderer process, so a malicious page can't read another site's memory. A defense hardened after the Spectre CPU attacks.

An iframe from a different site (not just a different subdomain) runs in its own process.