Comments (2)
geigerzaehler
commented on August 17, 2024
Hi Ward! The issue with the filepicker is not specific to our environment. Unfortunately there is nothing we can do to fix it on our side.
You can very easily reproduce the issue without using Contentful at all. Just create a small index.html file
<!doctype html>
<iframe src="dist/index.html" sandbox="allow-scripts allow-popups allow-popups-to-escape-sandbox">When you open it in a browser you’ll see the same error message as in the Contentful Web App
Uncaught SecurityError: Failed to set the 'cookie' property on 'Document': The document is sandboxed and lacks the 'allow-same-origin' flag.
The cause of the problem is that we sandbox the the IFrame and do not set the allow-same-origin flag. This prevents any code inside the IFrame from setting cookies. We cannot lift these restrictions since they enforce boundaries between the Contentful App and any custom widget. Doing so would seriously compromise security.
I suggest that you contact the filepicker support and ask them how to make their library work in a sandboxed IFrame.
from ui-extensions-sdk.
wardpenney
commented on August 17, 2024
Ok thanks @geigerzaehler for the information! I am already in contact with them and hopefully we can resolve it. Feel free to close this Issue.
from ui-extensions-sdk.
Related Issues (20)
- `init` doesn't work when called too late HOT 7
- `window` used directly in library breaks SSR environments HOT 8
- Metadata (tags) changes are not reflected in the editor HOT 1
- Frontend URL availability HOT 2
- Conditional Field Rendering HOT 3
- Contentful Management : Entry's references method not working
- Change LocaleSettings for the Entry HOT 1
- `onMetadataChanged` not called in Compose view HOT 3
- Passing data to opened dialog app. HOT 1
- incorrect version from navigator.openEntry HOT 3
- Links/References all have the type `Link` which makes them not distinguishable HOT 5
- Additional filters for dialogs.selectSingleEntry HOT 2
- Add margin option to auto resizer HOT 4
- Can I fetch all available locales with App SDK?
- dialogs.openAlert() but without any buttons
- SDK method to set field focused state
- Field iframe outset margin + padding
- Entry editor app in bulk editor needs to access useAutoResizer HOT 4
- How can I upload a file and create new assets? HOT 4
- Include defaultValue in field and contentType typings HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ui-extensions-sdk.