Attacker Capabilities: Read/Write storage

[jumde]

Access to storage in 1p/3p context is independent of javascript access. Storage is often used as a way track users across sites. Adding these capabilities would be helpful to highlight how to different privacy risks can be leveraged by attackers having/not-having access to storage across sites.