Media: Send Document-Isolation-Policy header on the site preview frame#78404
Open
t-hamano wants to merge 5 commits into
Open
Media: Send Document-Isolation-Policy header on the site preview frame#78404t-hamano wants to merge 5 commits into
t-hamano wants to merge 5 commits into
Conversation
The site editor document is cross-origin isolated via Document-Isolation-Policy, which places it in its own agent cluster. For classic themes, the site editor embeds the front end in a same-origin `wp_site_preview` iframe. Without a matching policy on the framed document, that iframe is loaded credentialless in a separate agent cluster, so the editor can no longer reach its `contentDocument` and the preview's interactive-element handling throws. Send the same header on the `wp_site_preview` request so the iframe joins the editor's agent cluster, restoring same-origin DOM access. Gating mirrors core's wp_initialize_site_preview_hooks(). The shared Chromium/filter check is extracted into gutenberg_should_use_document_isolation_policy(). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
t-hamano
added
[Type] Bug
t-hamano
commented
May 18, 2026
| * | ||
| * @return bool Whether DIP is supported and should be used. | ||
| */ | ||
| function gutenberg_should_use_document_isolation_policy(): bool { |
Contributor
Author
There was a problem hiding this comment.
I created a new function to consolidate the same logic.
t-hamano
added
Browser Issues
|
The following accounts have interacted with this PR and/or linked issues. I will continue to update these lists as activity occurs. You can also manually ask me to refresh this list by adding the If you're merging code through a pull request on GitHub, copy and paste the following into the bottom of the merge commit message. To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook. |
|
Flaky tests detected in cf04c31. 🔍 Workflow run URL: https://github.com/WordPress/gutenberg/actions/runs/26622386092
|
This was referenced May 20, 2026
6 tasks
Member
|
Thanks @t-hamano - code seems good. I'm also a little concerned sending this header on a preview could cause unexpected issues with the preview. We don't send these headers on the front end because we only need them in the editor. I wonder if we could we just avoid sending the headers on the outer frame for the preview screen? Some tests would be good here as well, ideally that catch the current breakage. |
Member
|
Hi @t-hamano - I drafted the Core backport for this PR at wordpress-develop#12004 (kept in draft until this PR merges) and pushed the corresponding |
t-hamano
removed
the
No Core Sync Required
The Site Editor's SitePreview component neutralizes focusable elements inside the preview iframe (aria-hidden="true" and pointer-events: none) so the previewed front end is not interactive. This was previously untested. Verify the behavior on a classic theme across links, buttons, and form controls. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
Size Change: 0 B Total Size: 8.21 MB ℹ️ View Unchanged
|
The classic-theme site editor home route embeds the front end in a same-origin `wp_site_preview` iframe and reads its `contentDocument` to neutralize interactive elements. Cross-origin isolation (DIP) on the editor puts it in its own agent cluster, blocking that access and breaking the preview. The previous fix sent a DIP header on the preview frame itself to realign the agent clusters, but `isolate-and-credentialless` strips credentials from cross-origin subresources, which can make the preview render differently from the live site. Instead, skip cross-origin isolation on the editor's classic-theme home route so both frames stay un-isolated and share an agent cluster, leaving the front end untouched. Other routes (pattern/template-part editors) still get isolation for client-side media processing. The home route is detected via the `p` query arg that core normalizes in _wp_get_site_editor_redirection_url(). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Contributor
Author
|
@adamsilverstein Thanks for the feedback!
This is a great idea. I've implemented it with f4932b0. The code changes are also minimal. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Follow up to #75991.
What? Why? How?
When a classic theme is active, the Site Editor displays a site preview. This is a preview of the site's front end, and it is expected that all interactive elements will be inactive, but as a result of #75991, this is no longer working.
Recording.2026-05-18.233505.mp4
This PR fixes it by sending the
Document-Isolation-Policyheader on thewp_site_previewrequest.Testing Instructions
Use of AI Tools
Authored with assistance from Claude Code; reviewed by the contributor.