[wp-trac] [WordPress Trac] #64803: Media: Skip cross-origin isolation for third-party page builders

[WordPress Trac]

#64803: Media: Skip cross-origin isolation for third-party page builders
---------------------------------------------+-----------------------------
 Reporter:  adamsilverstein                  |       Owner:
                                             |  adamsilverstein
     Type:  defect (bug)                     |      Status:  closed
 Priority:  normal                           |   Milestone:  7.0
Component:  Media                            |     Version:  trunk
 Severity:  normal                           |  Resolution:  fixed
 Keywords:  has-patch commit has-unit-tests  |     Focuses:
---------------------------------------------+-----------------------------
Changes (by adamsilverstein):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 In [changeset:"61947" 61947]:
 {{{
 #!CommitTicketReference repository="" revision="61947"
 Editor: Skip cross-origin isolation for third-party page builders.

 Document-Isolation-Policy (DIP) isolates the document and blocks same-
 origin iframe access that page builders rely on. Skip DIP setup when a
 third-party page builder overrides the block editor via a custom `action`
 query parameter.

 Also gates `wp_is_client_side_media_processing_enabled()` on a secure
 context check, since `SharedArrayBuffer` requires a secure context (HTTPS
 or localhost).

 Props adamsilverstein, westonruter, mukesh27, louiswol94, manhar,
 illuminea.
 Fixes #64803.
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/64803#comment:28>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform