Changeset 44580 for trunk/tests/phpunit/tests/customize/manager.php

Timestamp:

01/14/2019 06:37:30 AM (6 years ago)

Author:

pento

Message:

Customizer: Improve browser compatibility of the preview iframe.

When home and siteurl are different, the customizer preview iframe will be blank in Chrome and Safari, due to their X-Frame-Options implementation quirks.

Changing this to SAMEORIGIN and adding the frame-ancestors Content Security Policy gives the correct behaviour.

Props fullyint.
Fixes #40020.

File:

• trunk/tests/phpunit/tests/customize/manager.php (modified) (1 diff)

trunk/tests/phpunit/tests/customize/manager.php

@@ -849 +849 @@
      *
      * @ticket 30937
+     * @ticket 40020
      * @covers WP_Customize_Manager::filter_iframe_security_headers()
      */
     function test_filter_iframe_security_headers() {
-        $customize_url = admin_url( 'customize.php' );
         $wp_customize  = new WP_Customize_Manager();
         $headers       = $wp_customize->filter_iframe_security_headers( array() );
         $this->assertArrayHasKey( 'X-Frame-Options', $headers );
         $this->assertArrayHasKey( 'Content-Security-Policy', $headers );
-        $this->assertEquals( "ALLOW-FROM $customize_url", $headers['X-Frame-Options'] );
+        $this->assertEquals( 'SAMEORIGIN', $headers['X-Frame-Options'] );
+        $this->assertEquals( "frame-ancestors 'self'", $headers['Content-Security-Policy'] );
     }