Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: some iframes can use about:srcdoc, which spawns popups (follow-up to #1586) #1938

Closed
wants to merge 1 commit into from

Conversation

lwouis
Copy link

@lwouis lwouis commented Sep 3, 2021

Hi,

This is follow-up to #1586

It turns out some iframes use about:srcdoc instead of about:blank, and this creates the same issue as in the original PR.

This PR is a one-liner, so I hope you forgive if I didn't fill the template

Thank you!

@zorgiepoo
Copy link
Member

zorgiepoo commented Sep 3, 2021

@kornelski do you want to review over this one? I think the change is probably fine on its own, but I'm little weary about our safe URL handling logic, and I'm not sure if there are other HTML / iframe cases we're missing.

  • We also need a PR for 2.x branch for changes to land in the project.

@zorgiepoo zorgiepoo requested a review from kornelski September 3, 2021 20:08
@zorgiepoo
Copy link
Member

zorgiepoo commented Sep 3, 2021

If you can, you may also want to test the change with the legacy webkit 1 implementation for older OS's (or apps without sandboxed network entitlement), by temporarily adjusting the code so it takes the path of using [[SULegacyWebView alloc] init...]

@kornelski
Copy link
Member

Sorry, I don't have time to be involved in the project.

@zorgiepoo zorgiepoo removed the request for review from kornelski September 3, 2021 20:43
@zorgiepoo
Copy link
Member

zorgiepoo commented Sep 3, 2021

Ok thanks for response.

So two things here.

  1. Create a PR for 2.x branch (and test it there)
  2. Test legacy webview implementation

Then I'll want to just look up a bit more on about:srcdoc and implications in the codebase here.

@zorgiepoo
Copy link
Member

zorgiepoo commented Nov 6, 2021

I am dealing this with in #2006 and #2007 (made a minor change to avoid nullability issue). Thanks for bringing this up. Fyi, tagged pre-releases are published to Cocoapods now (will get the chance to publish a pre-release shortly).

@zorgiepoo zorgiepoo closed this Nov 6, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants