[wp-trac] [WordPress Trac] #64740: credentialless iframe incompatible with some browsers and cross-origin policies

WordPress Trac noreply at wordpress.org
Fri Feb 27 05:08:41 UTC 2026


#64740: credentialless iframe incompatible with some browsers and cross-origin
policies
-------------------------------------+------------------------------
 Reporter:  amykamala                |       Owner:  adamsilverstein
     Type:  defect (bug)             |      Status:  reviewing
 Priority:  normal                   |   Milestone:  7.0
Component:  Editor                   |     Version:
 Severity:  normal                   |  Resolution:
 Keywords:  has-patch needs-testing  |     Focuses:
-------------------------------------+------------------------------

Comment (by adamsilverstein):

 @amykamala

 I have disabled the headers and credentialless application for non GB
 editors based on the action not being edit (action=elementor for
 elementor) in https://github.com/WordPress/gutenberg/pull/75991.

 This should disable the feature for now in Elementor, can you double check
 that everything works as expected - especially media uploads? Elementor
 loaded in my local after this change without the previous error.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/64740#comment:17>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list