Make WordPress Core

Opened 20 months ago

Last modified 20 months ago

#57156 new defect (bug)

Icons missing in iOS Lockdown Mode

Reported by: noexitorescape's profile noexitorescape Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version:
Component: Administration Keywords: reporter-feedback needs-testing
Focuses: ui, administration, privacy Cc:

Description (last modified by sabernhardt)

Have you made any progress on a back-end workaround or better explanation for why all of the icons on mobile devices (WordPress, and numerous other third party applications) all have broken "squares" on all of these products.

The superficial cause is iOS16 in lockdown mode. But it's breaking all of our products including yours.

It will get worse when MacOS Ventura gets released into GA and has the same behavior.

I suspect it is a result of loading external JS in the https zone, such as previous problems with XSS and mixed content that have broken other web technologies in the past.

There is a workaround called "How to exclude apps or websites from Lockdown Mode" at the URL below. Best,

Attachments (2)

IMG_3179.jpg (63.3 KB) - added by noexitorescape 20 months ago.
screenshot of broken Wordpress icons
dashboard-welcome-widget-414px.png (47.8 KB) - added by sabernhardt 20 months ago.
Dashboard welcome widget with inline SVG icons (Firefox/Windows)

Download all attachments as: .zip

Change History (6)

20 months ago

screenshot of broken Wordpress icons

#1 @noexitorescape
20 months ago

To exclude an app or edit your excluded websites:

Open the Settings app.
Tap Privacy & Security.
Under Security, tap Lockdown Mode.
Tap Configure Web Browsing.

To exclude an app, turn that app off in the menu. Only apps that you have opened since enabling Lockdown Mode and which have limited functionality appear on this list.

To edit your excluded websites, tap Excluded Safari Websites > Edit.

This will restore your UI icons to WordPress, and the particular products *I* am over here screaming "where's my Anacin" at

#2 @noexitorescape
20 months ago

Correction: Here's how that works.

To exclude a website while browsing: Tap the Page Settings button , then tap Website Settings. Then turn off Lockdown Mode.

If this is the first time you've done this, the list I mentioned will be empty and uneditable.

#3 @noexitorescape
20 months ago

From now on instead of saying "Lockdown Enabled" in the bar, you will see RED TEXT that says "lockdown disabled."Livejournal, Mastodon and its derivatives, my OWN. website , and others will be fully functional.

Version 0, edited 20 months ago by noexitorescape (next)

#4 @sabernhardt
20 months ago

  • Component changed from External Libraries to Administration
  • Description modified (diff)
  • Focuses administration privacy added
  • Keywords reporter-feedback needs-testing added
  • Summary changed from icons on mobile devices (WordPress, and numerous other third party applications all have broken "squares" on all of these products.) to Icons missing in iOS Lockdown Mode
  • Version 6.1.1 deleted

Hi and thanks for the report!

Apple's Lockdown Mode article states:

web fonts might not be displayed, and images might be replaced with a missing image icon.

Lockdown Mode is intentionally very strict, and the screenshot seems to indicate that the "dashicons" font is blocked.

I expect this could cause some problems with the login pages' password visibility button and places within the admin back-end, too.

Of course, the admin toolbar likely has the biggest problem without the icon font. Its links show only the icons on smaller screens, and the WordPress logo link is icon-only whenever it appears (screens wider than 600 pixels).

Could you (or someone else) check whether Lockdown Mode also bans inline SVG images? One place to find them is the admin Dashboard, in the welcome widget, where each paragraph has an icon SVG before it. The block editor has many inline SVGs, too.

20 months ago

Dashboard welcome widget with inline SVG icons (Firefox/Windows)

Note: See TracTickets for help on using tickets.