Embedded iframe in Safari

Amerehei · November 14, 2023, 3:36pm

I have followed Embedding Bluescape to embed Bluescape workspace using an iframe

In Chrome it works well.
In Safari, the behaviour is strange. I can see the loading logo of Bluescape then the page become white (If it’s blocked by Sarafi, Why I can see Bluescape logo?!)

There are some errors in the console

[Error] Blocked a frame with origin "https://my-company.com" from accessing a frame with origin "https://client.apps.us.bluescape.com". Protocols, domains, and ports must match.
[Error] Fetch API cannot load https://nearest-media-region.l.chime.aws/ due to access control checks.
	(anonymous function)
	(anonymous function)
	b
	(anonymous function)
	u
	Promise
	n
	(anonymous function)
	ie
	(anonymous function)
[Error] Failed to load resource: the server responded with a status of 401 () (introspect, line 0)
[Error] Failed to load resource: the server responded with a status of 401 () (me, line 0)
[Error] Blocked a frame with origin "https://my-company.com" from accessing a frame with origin "https://client.apps.us.bluescape.com". Protocols, domains, and ports must match.
	sentryWrapped (helpers.js:79)
[Error] Failed to load resource: the server responded with a status of 401 () (introspect, line 0)
[Error] Failed to load resource: the server responded with a status of 401 () (sFhL6g_lS7v9g1eYrBMr, line 0)
[Error] Failed to load resource: the server responded with a status of 401 () (clientcredentials, line 0)
[Error] Failed to load resource: the server responded with a status of 401 () (sFhL6g_lS7v9g1eYrBMr, line 0)
[Error] Failed to load resource: the server responded with a status of 401 () (role, line 0)
[Error] Failed to load resource: the server responded with a status of 401 () (groups, line 0)
[Error] Fetch API cannot load https://collab.apps.us.bluescape.com/static/fonts/fonts_v2.json due to access control checks.
	fe
	Me
	Rt
	nt
	Ot
	fe
	Me
	Rt
	nt
	ri
	gn
	(anonymous function)
	nt
	ri
	(anonymous function)
[Error] Fetch API cannot load https://client.apps.us.bluescape.com/dist/libs/canvaskit/0.38.0-bluescape-4.0.1/canvaskit.wasm due to access control checks.
	(anonymous function)
	(anonymous function)
	(anonymous function)
	(anonymous function)
	_initImpl
	_initAttempt
	(anonymous function)
	init
	(anonymous function)
	init
	(anonymous function)
	init
	fe
	Me
	Rt
	nt
	Ot
	(anonymous function)
	x
	Oe
	Me
	Rt
	nt
	ri
	xt
	(anonymous function)
	(anonymous function)
	(anonymous function)
	(anonymous function)
	F
	Z
	z
	Ee
	Me
	Rt
	nt
	ri
	gn
	(anonymous function)
	nt
	Ot
	fe
	Me
	Rt
	nt
	Ot
	fe
	Me
	Rt
	nt
	ri
	gn
	(anonymous function)
	nt
	ri
	gn
	(anonymous function)
	nt
	ri
	gn
	(anonymous function)
	nt
	ri
	(anonymous function)
[Error] Fetch API cannot load https://isam.apps.us.bluescape.com/graphql?queryId=HelpMenus due to access control checks.
	(anonymous function)
	(anonymous function)
	b
	(anonymous function)
	u
	Promise
	n
	(anonymous function)
	ie
	(anonymous function)

Amerehei · November 14, 2023, 4:33pm

I have checked disable cache in network tab, the error is slightly different

[Error] Unhandled Promise Rejection: ChunkLoadError: Loading chunk 4636 failed.
(error: https://client.apps.us.bluescape.com/c4636-9fe441d4da4530dbec32.js)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:2141:1200)
[Error] Error: Loading CSS chunk 366 failed.
(https://client.apps.us.bluescape.com/c366-723e7d2a6799add4aa00.css)
	iu (e4826-ca73e6e75635056ecd58.js:1848:183)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1848:705)
	vi (e4826-ca73e6e75635056ecd58.js:1846:10173)
	np (e4826-ca73e6e75635056ecd58.js:1848:33380)
	ql (e4826-ca73e6e75635056ecd58.js:1848:32948)
	bc (e4826-ca73e6e75635056ecd58.js:1848:32442)
	Sf (e4826-ca73e6e75635056ecd58.js:1848:42683)
	du (e4826-ca73e6e75635056ecd58.js:1848:42031)
	ap (e4826-ca73e6e75635056ecd58.js:1848:36745)
	D (e4826-ca73e6e75635056ecd58.js:2127:1565)
	te (e4826-ca73e6e75635056ecd58.js:2127:1928)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:2130:42791)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:2131:541)
	S (e4826-ca73e6e75635056ecd58.js:2131:395)
	w (e4826-ca73e6e75635056ecd58.js:2131:420)
[Error] The webapp crashed and the user had to reload! (2)
Error: Loading CSS chunk 366 failed. (https://client.apps.us.bluescape.com/c366-723e7d2a6799add4aa00.css)
{componentStack: "↵Lazy↵Suspense↵Vf@https://client.apps.us.bluescape…cape.com/e4826-ca73e6e75635056ecd58.js:1686:14564"}
	componentDidCatch (e4826-ca73e6e75635056ecd58.js:1686:15095)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1848:815)
	vi (e4826-ca73e6e75635056ecd58.js:1846:10173)
	np (e4826-ca73e6e75635056ecd58.js:1848:33380)
	ql (e4826-ca73e6e75635056ecd58.js:1848:32948)
	bc (e4826-ca73e6e75635056ecd58.js:1848:32442)
	Sf (e4826-ca73e6e75635056ecd58.js:1848:42683)
	du (e4826-ca73e6e75635056ecd58.js:1848:42031)
	ap (e4826-ca73e6e75635056ecd58.js:1848:36745)
	D (e4826-ca73e6e75635056ecd58.js:2127:1565)
	te (e4826-ca73e6e75635056ecd58.js:2127:1928)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:2130:42791)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:2131:541)
	S (e4826-ca73e6e75635056ecd58.js:2131:395)
	w (e4826-ca73e6e75635056ecd58.js:2131:420)
[Error] Failed to load resource: the server responded with a status of 401 () (me, line 0)
[Error] Failed to load resource: the server responded with a status of 401 () (introspect, line 0)
[Error] Blocked a frame with origin "https://my-company.com" from accessing a frame with origin "https://client.apps.us.bluescape.com". Protocols, domains, and ports must match.
	sentryWrapped (helpers.js:79)
[Error] Failed to load resource: the server responded with a status of 401 () (introspect, line 0)
[Error] Failed to load resource: the server responded with a status of 401 () (clientcredentials, line 0)
[Error] Failed to load resource: the server responded with a status of 401 () (sFhL6g_lS7v9g1eYrBMr, line 0)
[Error] Failed to load resource: the server responded with a status of 401 () (sFhL6g_lS7v9g1eYrBMr, line 0)
[Error] Failed to load resource: the server responded with a status of 401 () (role, line 0)
[Error] Origin https://client.apps.us.bluescape.com is not allowed by Access-Control-Allow-Origin. Status code: 200
[Error] Fetch API cannot load https://static.cdn.apps.us.prod.blscp.io/fonts/fonts.json due to access control checks.
[Error] Failed to load resource: Origin https://client.apps.us.bluescape.com is not allowed by Access-Control-Allow-Origin. Status code: 200 (fonts.json, line 0)
[Error] Failed to load resource: the server responded with a status of 401 () (graphql, line 0)
[Error] Failed to load resource: the server responded with a status of 401 () (me, line 0)
[Error] Failed to load resource: the server responded with a status of 401 () (me, line 0)
[Error] Fetch API cannot load https://static.cdn.apps.us.prod.blscp.io/fonts/fonts_v2.json due to access control checks.
	fe (c9351-343809e54f33ac00ff4b.js:241:2557)
	Me (c9351-343809e54f33ac00ff4b.js:244:1836)
	Rt (c9351-343809e54f33ac00ff4b.js:244:2314)
	nt (c9351-343809e54f33ac00ff4b.js:244:1610)
	Ot (c9351-343809e54f33ac00ff4b.js:244:1322)
	fe (c9351-343809e54f33ac00ff4b.js:241:2617)
	Me (c9351-343809e54f33ac00ff4b.js:244:1836)
	Rt (c9351-343809e54f33ac00ff4b.js:244:2314)
	nt (c9351-343809e54f33ac00ff4b.js:244:1610)
	Ot (c9351-343809e54f33ac00ff4b.js:244:1322)
	fe (c9351-343809e54f33ac00ff4b.js:241:2617)
	Me (c9351-343809e54f33ac00ff4b.js:244:1836)
	Rt (c9351-343809e54f33ac00ff4b.js:244:2314)
	nt (c9351-343809e54f33ac00ff4b.js:244:1610)
	Ot (c9351-343809e54f33ac00ff4b.js:244:1322)
	fe (c9351-343809e54f33ac00ff4b.js:241:2617)
	Me (c9351-343809e54f33ac00ff4b.js:244:1836)
	Rt (c9351-343809e54f33ac00ff4b.js:244:2314)
	nt (c9351-343809e54f33ac00ff4b.js:244:1610)
	ri (c9351-343809e54f33ac00ff4b.js:244:2180)
	gn (c9351-343809e54f33ac00ff4b.js:244:486)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5171)
	nt (c9351-343809e54f33ac00ff4b.js:244:1596)
	ri (c9351-343809e54f33ac00ff4b.js:244:2180)
	gn (c9351-343809e54f33ac00ff4b.js:244:486)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5171)
	nt (c9351-343809e54f33ac00ff4b.js:244:1596)
	ri (c9351-343809e54f33ac00ff4b.js:244:2180)
	gn (c9351-343809e54f33ac00ff4b.js:244:486)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5171)
	nt (c9351-343809e54f33ac00ff4b.js:244:1596)
	ri (c9351-343809e54f33ac00ff4b.js:244:2180)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:1661)
[Error] Fetch API cannot load https://collab.apps.us.bluescape.com/static/fonts/fonts_v2.json due to access control checks.
	fe (c9351-343809e54f33ac00ff4b.js:241:2557)
	Me (c9351-343809e54f33ac00ff4b.js:244:1836)
	Rt (c9351-343809e54f33ac00ff4b.js:244:2314)
	nt (c9351-343809e54f33ac00ff4b.js:244:1610)
	Ot (c9351-343809e54f33ac00ff4b.js:244:1322)
	fe (c9351-343809e54f33ac00ff4b.js:241:2617)
	Me (c9351-343809e54f33ac00ff4b.js:244:1836)
	Rt (c9351-343809e54f33ac00ff4b.js:244:2314)
	nt (c9351-343809e54f33ac00ff4b.js:244:1610)
	ri (c9351-343809e54f33ac00ff4b.js:244:2180)
	gn (c9351-343809e54f33ac00ff4b.js:244:486)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5171)
	nt (c9351-343809e54f33ac00ff4b.js:244:1596)
	ri (c9351-343809e54f33ac00ff4b.js:244:2180)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:1661)
[Error] Fetch API cannot load https://client.apps.us.bluescape.com/ws-support due to access control checks.
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1628:56076)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1628:56694)
	b (e4826-ca73e6e75635056ecd58.js:1961:76896)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:2119:38682)
	u (e4826-ca73e6e75635056ecd58.js:1961:76988)
	Promise
	n (e4826-ca73e6e75635056ecd58.js:1961:77010)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1628:56014)
	ie (e4826-ca73e6e75635056ecd58.js:1628:56752)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1628:59150)
[Error] Fetch API cannot load https://isam.apps.us.bluescape.com/graphql?queryId=BroadcastMessages due to access control checks.
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1628:56076)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1628:56694)
	b (e4826-ca73e6e75635056ecd58.js:1961:76896)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:2119:38682)
	u (e4826-ca73e6e75635056ecd58.js:1961:76988)
	Promise
	n (e4826-ca73e6e75635056ecd58.js:1961:77010)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1628:56014)
	ie (e4826-ca73e6e75635056ecd58.js:1628:56752)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1628:59150)
[Error] Fetch API cannot load https://client.apps.us.bluescape.com/dist/libs/canvaskit/0.38.0-bluescape-4.0.1/canvaskit.wasm due to access control checks.
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:203:30349)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:203:30573)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:203:30589)
	(anonymous function) (c7530-0405c6f7bfe4efcdbfd0.js:43:21382)
	_initImpl (c7530-0405c6f7bfe4efcdbfd0.js:43:21406)
	_initAttempt (c7530-0405c6f7bfe4efcdbfd0.js:43:21618)
	(anonymous function) (c7530-0405c6f7bfe4efcdbfd0.js:43:22370)
	init (c7530-0405c6f7bfe4efcdbfd0.js:43:22518)
	(anonymous function) (c7530-0405c6f7bfe4efcdbfd0.js:43:24459)
	init (c7530-0405c6f7bfe4efcdbfd0.js:43:24726)
	(anonymous function) (c7530-0405c6f7bfe4efcdbfd0.js:85:3770)
	init (c7530-0405c6f7bfe4efcdbfd0.js:85:3792)
	fe (c9351-343809e54f33ac00ff4b.js:241:2557)
	Me (c9351-343809e54f33ac00ff4b.js:244:1836)
	Rt (c9351-343809e54f33ac00ff4b.js:244:2314)
	nt (c9351-343809e54f33ac00ff4b.js:244:1610)
	Ot (c9351-343809e54f33ac00ff4b.js:244:1322)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:3024)
	x (c9351-343809e54f33ac00ff4b.js:238:39499)
	Oe (c9351-343809e54f33ac00ff4b.js:241:3003)
	Me (c9351-343809e54f33ac00ff4b.js:244:1836)
	Rt (c9351-343809e54f33ac00ff4b.js:244:2314)
	nt (c9351-343809e54f33ac00ff4b.js:244:1610)
	ri (c9351-343809e54f33ac00ff4b.js:244:2180)
	xt (c9351-343809e54f33ac00ff4b.js:241:2380)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:1289)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:1524)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:244:3850)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:2142)
	F (c9351-343809e54f33ac00ff4b.js:238:39415)
	Z (c9351-343809e54f33ac00ff4b.js:238:39607)
	z (c9351-343809e54f33ac00ff4b.js:238:39465)
	Ee (c9351-343809e54f33ac00ff4b.js:241:2096)
	Me (c9351-343809e54f33ac00ff4b.js:244:1836)
	Rt (c9351-343809e54f33ac00ff4b.js:244:2314)
	nt (c9351-343809e54f33ac00ff4b.js:244:1610)
	ri (c9351-343809e54f33ac00ff4b.js:244:2180)
	gn (c9351-343809e54f33ac00ff4b.js:244:486)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5171)
	nt (c9351-343809e54f33ac00ff4b.js:244:1596)
	Ot (c9351-343809e54f33ac00ff4b.js:244:1322)
	fe (c9351-343809e54f33ac00ff4b.js:241:2617)
	Me (c9351-343809e54f33ac00ff4b.js:244:1836)
	Rt (c9351-343809e54f33ac00ff4b.js:244:2314)
	nt (c9351-343809e54f33ac00ff4b.js:244:1610)
	Ot (c9351-343809e54f33ac00ff4b.js:244:1322)
	fe (c9351-343809e54f33ac00ff4b.js:241:2617)
	Me (c9351-343809e54f33ac00ff4b.js:244:1836)
	Rt (c9351-343809e54f33ac00ff4b.js:244:2314)
	nt (c9351-343809e54f33ac00ff4b.js:244:1610)
	ri (c9351-343809e54f33ac00ff4b.js:244:2180)
	gn (c9351-343809e54f33ac00ff4b.js:244:486)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5171)
	nt (c9351-343809e54f33ac00ff4b.js:244:1596)
	ri (c9351-343809e54f33ac00ff4b.js:244:2180)
	gn (c9351-343809e54f33ac00ff4b.js:244:486)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5171)
	nt (c9351-343809e54f33ac00ff4b.js:244:1596)
	ri (c9351-343809e54f33ac00ff4b.js:244:2180)
	gn (c9351-343809e54f33ac00ff4b.js:244:486)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5171)
	nt (c9351-343809e54f33ac00ff4b.js:244:1596)
	ri (c9351-343809e54f33ac00ff4b.js:244:2180)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:1661)
[Error] TypeError: Load failed
	(anonymous function) (c8168-10458ebb6987c2ea503f.js:12:644)
	X (c9351-343809e54f33ac00ff4b.js:203:67713)
	gn (c9351-343809e54f33ac00ff4b.js:244:435)
	xt (c9351-343809e54f33ac00ff4b.js:241:5036)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5131)
	gn (c9351-343809e54f33ac00ff4b.js:244:486)
	xt (c9351-343809e54f33ac00ff4b.js:241:5036)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5131)
	gn (c9351-343809e54f33ac00ff4b.js:244:486)
	xt (c9351-343809e54f33ac00ff4b.js:241:5036)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5131)
	gn (c9351-343809e54f33ac00ff4b.js:244:486)
	xt (c9351-343809e54f33ac00ff4b.js:241:5036)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5131)
	gn (c9351-343809e54f33ac00ff4b.js:244:486)
	xt (c9351-343809e54f33ac00ff4b.js:241:5036)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5131)
	nt (c9351-343809e54f33ac00ff4b.js:244:1683)
	ri (c9351-343809e54f33ac00ff4b.js:244:2180)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:1661)
[Error] The above error occurred in task ft
    created by takeLatest(@CORETEXT/RE_INIT_CANVAS_KIT_AND_LOAD_FONTS, ft)
    created by Gt
    created by Ve
    created by Zc
Tasks cancelled due to error:
takeLatest(@CORETEXT/RE_INIT_CANVAS_KIT_AND_LOAD_FONTS, ft)
takeEvery(@CORETEXT/REQUEST_FONTS, Nt)
takeLeading(@CORETEXT/INIT_FONTS, wt)
Ee
nt
yc
ot
d
Ke
M
Nt
yt
He
Bt
Co
eo
Ps
Os
Ir
Mr
Bo
Gr
Kr
Qr
el
sl
al
ul
Nl
zl
Ql
sa
la
pa
Ga
ja
ic
te
se
$
Tc
Rc
	(anonymous function) (c8168-10458ebb6987c2ea503f.js:12:644)
	X (c9351-343809e54f33ac00ff4b.js:203:67731)
	gn (c9351-343809e54f33ac00ff4b.js:244:435)
	xt (c9351-343809e54f33ac00ff4b.js:241:5036)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5131)
	gn (c9351-343809e54f33ac00ff4b.js:244:486)
	xt (c9351-343809e54f33ac00ff4b.js:241:5036)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5131)
	gn (c9351-343809e54f33ac00ff4b.js:244:486)
	xt (c9351-343809e54f33ac00ff4b.js:241:5036)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5131)
	gn (c9351-343809e54f33ac00ff4b.js:244:486)
	xt (c9351-343809e54f33ac00ff4b.js:241:5036)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5131)
	gn (c9351-343809e54f33ac00ff4b.js:244:486)
	xt (c9351-343809e54f33ac00ff4b.js:241:5036)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:5131)
	nt (c9351-343809e54f33ac00ff4b.js:244:1683)
	ri (c9351-343809e54f33ac00ff4b.js:244:2180)
	(anonymous function) (c9351-343809e54f33ac00ff4b.js:241:1661)
[Error] Fetch API cannot load https://isam.apps.us.bluescape.com/api/v3/users/me/groups due to access control checks.
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1628:56076)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1628:56694)
	b (e4826-ca73e6e75635056ecd58.js:1961:76896)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:2119:38317)
[Error] Fetch API cannot load https://client.apps.us.bluescape.com/ws-support due to access control checks.
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1628:56076)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1628:56694)
	b (e4826-ca73e6e75635056ecd58.js:1961:76896)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:2119:38317)
[Error] Fetch API cannot load https://client.apps.us.bluescape.com/ws-support due to access control checks.
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1628:56076)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1628:56694)
	b (e4826-ca73e6e75635056ecd58.js:1961:76896)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:2119:38317)
[Error] Fetch API cannot load https://client.apps.us.bluescape.com/ws-support due to access control checks.
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1628:56076)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:1628:56694)
	b (e4826-ca73e6e75635056ecd58.js:1961:76896)
	(anonymous function) (e4826-ca73e6e75635056ecd58.js:2119:38317)
[Error] Refused to load https://identity.apps.us.bluescape.com/embed/login?redirect_uri=https%3A%2F%2Fclient.apps.us.bluescape.com%2Fembed%2FsFhL6g_lS7v9g1eYrBMr%3Fembed%3D1%26embedded%3D%257B%2522hostContext%2522%253A%2522scratchWorkspace%2522%252C%2522hostType%2522%253A%2522web%2522%252C%2522type%2522%253A%2522embed%2522%257D because it does not appear in the frame-ancestors directive of the Content Security Policy.
[Error] Sandbox access violation: Blocked a frame at "https://my-company.com" from accessing a frame at "https://identity.apps.us.bluescape.com".  The frame being accessed is sandboxed and lacks the "allow-same-origin" flag.
	sentryWrapped (helpers.js:79)

Amerehei · November 14, 2023, 4:43pm

As I found, the iframe itself is not blocked there are other blocked resources, such as .css and .jss file and Sentry iframe (it seems Senty embeds another iframe and that iframe is blocked and it causes confusion)

What I cannot understand is why some css and js files are allowed while others are blocked!

For example, What are differences between these two .css files?!
(In the tooltip you can see the initiator)

Allowed

Blocked

kkoechley · November 14, 2023, 4:53pm

Hi @Amerehei,

Thanks for raising this issue, as always! This appears to be a bug. Let me speak to Engineering and i’ll get back to you with fix and/or potential workaround (if any).

Amerehei · November 29, 2023, 5:55pm

@kkoechley Is there any update or temporary workaround?

kkoechley · November 29, 2023, 6:46pm

Hi @Amerehei,

Sorry for the delay. This appears to be a safari security restriction with iFrames, but I don’t yet have a safari workaround and/or fix. Let me run this back by Engineering and see what we can do.

system · December 29, 2023, 6:47pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.