[wp-trac] [WordPress Trac] #64740: credentialless iframe incompatible with some browsers and cross-origin policies

WordPress Trac noreply at wordpress.org
Fri Feb 27 08:28:01 UTC 2026


#64740: credentialless iframe incompatible with some browsers and cross-origin
policies
-------------------------------------+------------------------------
 Reporter:  amykamala                |       Owner:  adamsilverstein
     Type:  defect (bug)             |      Status:  reviewing
 Priority:  normal                   |   Milestone:  7.0
Component:  Editor                   |     Version:
 Severity:  normal                   |  Resolution:
 Keywords:  has-patch needs-testing  |     Focuses:
-------------------------------------+------------------------------

Comment (by soyebsalar01):

 Tested on WordPress 7.0-beta in Firefox with Elementor.

 Before applying the patch, the editor stuck on loading and console showed
 a cross-origin frame SecurityError.

 After applying the patch, the editor load correctly and no cross-origin
 errors appear in the console.

 Patch resolves the issue in Firefox in my testing.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/64740#comment:18>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list