WordPress.org
Get WordPress

Make WordPress Core

Changes between Initial Version and Version 1 of Ticket #45033, comment 8


Ignore:
Timestamp:
04/12/2024 09:06:12 AM (19 months ago)
Author:
tidal
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #45033, comment 8

    initial v1  
    44Seems like WordPress has changed and now adds a sandbox attribute. This has broken the embed. The sandbox seems to need both allow-scripts and allow-same-origin, else I'm getting CORS errors for our static S3 resources (js, css and fonts).
    55
    6 Examples here: <h2>sandbox="allow-scripts"</h2>
    7 <iframe class="wp-embedded-content" sandbox="allow-scripts" src="https://embed.tidal.com/tracks/137457240#?secret=JK0agVf1VT" data-secret="JK0agVf1VT" width="500" height="120" frameborder="0"></iframe>
    8 
    9 <h2>sandbox="allow-scripts allow-same-origin"</h2>
    10 <iframe class="wp-embedded-content" sandbox="allow-scripts allow-same-origin" src="https://embed.tidal.com/tracks/137457240#?secret=JK0agVf1VT" data-secret="JK0agVf1VT" width="500" height="120" frameborder="0"></iframe>
    11 
    12 <h2>No Sandbox</h2>
    13 <iframe src="https://embed.tidal.com/tracks/137457240#?secret=JK0agVf1VT" width="500" height="120" frameborder="0"></iframe>
     6Examples here: [https://codepen.io/enjikaka/pen/JjVZBYX]