SharedArrayBuffer / Chrome 92 / cross-origin isolation

[wijnbladh]

Heyas,

If I grep the built JavaScript code, I can spot some references to SharedArrayBuffer. It's probably coming from some dependency since I cannot spot any in the SDK src folder Any ideas if the upcoming Chrome Desktop 92 update might cause any problems? See https://developer.chrome.com/blog/enabling-shared-array-buffer/ for more.

In the cross-device flow the user is taken to https://id.onfido.com/NNNNNN, but it seems this page does not pass the related test available from window.crossOriginIsolated (see https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/SharedArrayBuffer).

[kopijunkie]

Hi @wijnbladh

Thank you for highlighting this. We don't think it affects the Web SDK running on Chrome 92 but we will need to dive into what dependencies are usingSharedArrayBuffer and evaluate the potential to be sure.