two.js icon indicating copy to clipboard operation
two.js copied to clipboard

[Bug] the codepen examples don't load on macOS Safari

Open mesqueeb opened this issue 2 years ago • 10 comments

the codepen examples don't seem to load on macOS Safari: https://two.js.org/

mesqueeb avatar Dec 30 '22 05:12 mesqueeb

What version? They work for me on Version 16.1 (18614.2.9.1.12)

jonobr1 avatar Jan 02 '23 05:01 jonobr1

See both versions screenshots added

  • iPhone iOS 16.0.2
  • macOS safari Version 16.1 (18614.2.9.1.12)

ps: clicking rerun also does nothing

mesqueeb avatar Jan 02 '23 05:01 mesqueeb

PS: on page load for macOS I get this in the Safari console: image

mesqueeb avatar Jan 02 '23 05:01 mesqueeb

PS: these are my Safari privacy settings: image

mesqueeb avatar Jan 02 '23 05:01 mesqueeb

disabling prevention of cross-site tracking seems to show the examples again, but I don't think many people would allow such a thing... : /

I guess the issue is upstream

mesqueeb avatar Jan 02 '23 05:01 mesqueeb

might be worth looking into different example providers other than codepen

mesqueeb avatar Jan 02 '23 05:01 mesqueeb

Ohhhhh, this is the embedded Codepens. Not the /examples page. Maybe my API key is configured incorrectly. I'll look into this. Thanks for reporting

jonobr1 avatar Jan 02 '23 18:01 jonobr1

I tried setting the Content Security Policy meta tag as described in this Stack Overflow, but was unable to come to a meaningful resolution. So, I've reached out to CodePen for guidance. I'll update this issue when I hear back.

jonobr1 avatar Jan 03 '23 19:01 jonobr1

Safari 16 doesn't send the session cookie if the web page is in an iFrame and Prevent cross site-tracking is enabled (this is the default setting).

It isn't reasonable to ask users to disable cross site scripting projection so we've released a workaround on our end and embeds work on Safari again.

quezo avatar Jan 04 '23 22:01 quezo

Amazing, thanks for the update!

jonobr1 avatar Jan 04 '23 23:01 jonobr1