Icons missing in iOS Lockdown Mode

[noexitorescape]

Have you made any progress on a back-end workaround or better explanation for why all of the icons on mobile devices (WordPress, and numerous other third party applications) all have broken "squares" on all of these products.

The superficial cause is iOS16 in lockdown mode. But it's breaking all of our products including yours.

It will get worse when MacOS Ventura gets released into GA and has the same behavior.

I suspect it is a result of loading external JS in the https zone, such as previous problems with XSS and mixed content that have broken other web technologies in the past.

There is a workaround called "How to exclude apps or websites from Lockdown Mode" at the URL below. Best, ​https://support.apple.com/en-in/HT212650

[noexitorescape]

screenshot of broken Wordpress icons

[noexitorescape]

To exclude an app or edit your excluded websites:

Open the Settings app.
Tap Privacy & Security.
Under Security, tap Lockdown Mode.
Tap Configure Web Browsing.

To exclude an app, turn that app off in the menu. Only apps that you have opened since enabling Lockdown Mode and which have limited functionality appear on this list.

To edit your excluded websites, tap Excluded Safari Websites > Edit.

This will restore your UI icons to WordPress, and the particular products *I* am over here screaming "where's my Anacin" at

[noexitorescape]

Correction: Here's how that works.

To exclude a website while browsing: Tap the Page Settings button , then tap Website Settings. Then turn off Lockdown Mode.

If this is the first time you've done this, the list I mentioned will be empty and uneditable.

[noexitorescape]

From now on instead of saying "Lockdown Enabled" in the bar, you will see RED TEXT that says "lockdown disabled."Livejournal, Mastodon and its derivatives, my OWN. website , and others will be fully functional.

[sabernhardt]

Hi and thanks for the report!

Apple's ​Lockdown Mode article states:

web fonts might not be displayed, and images might be replaced with a missing image icon.

Lockdown Mode is intentionally very strict, and the screenshot seems to indicate that the "dashicons" font is blocked.

I expect this could cause some problems with the login pages' password visibility button and places within the admin back-end, too.

Of course, the admin toolbar likely has the biggest problem without the icon font. Its links show only the icons on smaller screens, and the WordPress logo link is icon-only whenever it appears (screens wider than 600 pixels).

Could you (or someone else) check whether Lockdown Mode also bans inline SVG images? One place to find them is the admin Dashboard, in the welcome widget, where each paragraph has an icon SVG before it. The block editor has many inline SVGs, too.

[sabernhardt]

Dashboard welcome widget with inline SVG icons (Firefox/Windows)