Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Popup: Launch to a Trinsic loading page instead of about:blank #302

Merged
merged 2 commits into from
Dec 3, 2024

Conversation

geel9
Copy link
Member

@geel9 geel9 commented Dec 3, 2024

The Cross-Origin-Opener-Policy, when set on a customer's page which opens a Trinsic popup, can block necessary postMessage communication between the popup and the customer's page.

The same-origin-allow-popups value is meant to resolve this, but on Safari specifically, it breaks if the popup is first opened to about:blank and later redirected to our domain (as we were doing).

Safari dictates that the popup must be launched to our actual domain in order for window.opener to remain intact, so this change does that.

Copy link
Member

@janpieterz janpieterz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great. Should we add something to our documentation and web-ui readme about this header? Or does this mean even the most restrictive header value now works?

@geel9 geel9 merged commit 653f1e8 into main Dec 3, 2024
14 checks passed
@geel9 geel9 deleted the jc/popup-loading-page branch December 3, 2024 19:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants