[wp-trac] [WordPress Trac] #64740: credentialless iframe incompatible with some browsers and cross-origin policies

[WordPress Trac]

#64740: credentialless iframe incompatible with some browsers and cross-origin
policies
-------------------------------------+------------------------------
 Reporter:  amykamala                |       Owner:  adamsilverstein
     Type:  defect (bug)             |      Status:  reviewing
 Priority:  normal                   |   Milestone:  7.0
Component:  Editor                   |     Version:
 Severity:  normal                   |  Resolution:
 Keywords:  has-patch needs-testing  |     Focuses:
-------------------------------------+------------------------------

Comment (by adamsilverstein):

 I am attempting to address all of the reported issues in
 https://github.com/WordPress/gutenberg/pull/75991 by switching from iframe
 `credentialless` to using Document-Isolation-Policy for Chrome.

 Client Side Media should be disabled by default for Safari and Firefox as
 of Beta 2, see https://github.com/WordPress/gutenberg/pull/75863 - however
 we may need to extend this to the headers we are adding if they still
 cause an issue. The PR does that (but so far isn't fixing the issue).

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/64740#comment:15>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform