[wp-trac] [WordPress Trac] #50554: Do not use iframe for plugin information dialog

WordPress Trac noreply at wordpress.org
Fri Aug 15 11:52:47 UTC 2025


#50554: Do not use iframe for plugin information dialog
--------------------------+-----------------------------------------
 Reporter:  techboyg5     |       Owner:  (none)
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Plugins       |     Version:
 Severity:  normal        |  Resolution:  invalid
 Keywords:  close         |     Focuses:  javascript, administration
--------------------------+-----------------------------------------
Changes (by nikunj8866):

 * keywords:   => close
 * status:  new => closed
 * resolution:   => invalid


Comment:

 Thanks for the report. The plugin information modal in WordPress admin is
 designed to load inside an iframe. If the server is configured with the `X
 -Frame-Options: DENY` header, browsers will block the iframe from loading,
 which results in this behavior.

 This header is part of the site’s/server's security configuration and not
 set by WordPress core. Changing it to `SAMEORIGIN` will allow the modal to
 work while maintaining protection.

 Since this is caused by site-specific configuration rather than a core
 issue, I'm marking this as **invalid**.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/50554#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list