Opening Widget in separate browser windows does not work (token missing in URL)

[Norbert80]

Steps to reproduce

Hello all,

I have included a Kanban board from cryptpad.fr as an editable widget/integration/webapp in Element. For this I have included the URL using "Custom" integration.

Now it comes to an error when I click the button on the pinned widget at the top-right to open the webapp in a separate browser window.

The error only affects Element Desktop but not Element Android. The problem is that Element Desktop does not pass the URL completely to the browser. The token part is missing.

This is how the URL from Element Android looks like: https://scalar.vector.im/api/widgets/generic.html?url[place-holder-for-webapp-url]&scalar_token=[place-holder-for-token-value]

And with Element Desktop: https://scalar.vector.im/api/widgets/generic.html?url[place-holder-for-webapp-url]

So, this means that the URL from Element Desktop (unlike Element Android) misses the following part: &scalar_token=[place-holder-for-token-value]

If it helps, I'm happy to provide concrete URLs without placeholders upon request.

Outcome

Webapp does not work in seperate Browser window if shared from Element Desktop.

Operating system

Linux

Application version

1.11.1

How did you install the app?

No response

Homeserver

No response

Will you send logs?

No

[turt2live]

This is currently considered a security feature because the tab is not in a controlled space, so it doesn't get a token.