Changeset 44580 for trunk/tests/phpunit/tests/customize/manager.php

Timestamp:

01/14/2019 06:37:30 AM (8 years ago)

Author:

pento

Message:

Customizer: Improve browser compatibility of the preview iframe.

When home and siteurl are different, the customizer preview iframe will be blank in Chrome and Safari, due to their X-Frame-Options implementation quirks.

Changing this to SAMEORIGIN and adding the frame-ancestors Content Security Policy gives the correct behaviour.

Props fullyint.
Fixes #40020.

File:

• trunk/tests/phpunit/tests/customize/manager.php (modified) (1 diff)

trunk/tests/phpunit/tests/customize/manager.php

@@ -849 +849 @@
          *
          * @ticket 30937
+         * @ticket 40020
          * @covers WP_Customize_Manager::filter_iframe_security_headers()
          */
         function test_filter_iframe_security_headers() {
-                $customize_url = admin_url( 'customize.php' );
                 $wp_customize  = new WP_Customize_Manager();
                 $headers       = $wp_customize->filter_iframe_security_headers( array() );
                 $this->assertArrayHasKey( 'X-Frame-Options', $headers );
                 $this->assertArrayHasKey( 'Content-Security-Policy', $headers );
-                $this->assertEquals( "ALLOW-FROM $customize_url", $headers['X-Frame-Options'] );
+                $this->assertEquals( 'SAMEORIGIN', $headers['X-Frame-Options'] );
+                $this->assertEquals( "frame-ancestors 'self'", $headers['Content-Security-Policy'] );
         }