deepcrayon
/
lila
1
0
Fork 0
Code Releases Activity

Use 'Cross-Origin-Embedder-Policy: credentialless' in Chrome 96+ 

On pages embedding Stockfish (i.e. using SharedArrayBuffer).
To allow custom backgrounds from non-CORS pages.
deepcrayonfish^2
Benedikt Werner 2021-12-04 03:47:15 +01:00 committed by Niklas Fiekas
parent 6d33261fb5
commit d9b7ba6139
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/controllers/LilaController.scala
View File

@ -65,10 +65,11 @@ abstract private[controllers] class LilaController(val env: Env)
implicit def reqConfig(implicit req: RequestHeader) = ui.EmbedConfig(req)
def reqLang(implicit req: RequestHeader) = I18nLangPicker(req)
protected def EnableSharedArrayBuffer(res: Result): Result =
protected def EnableSharedArrayBuffer(res: Result)(implicit req: RequestHeader): Result =
res.withHeaders(
"Cross-Origin-Opener-Policy" -> "same-origin",
"Cross-Origin-Embedder-Policy" -> "require-corp"
"Cross-Origin-Embedder-Policy" -> (if (HTTPRequest isChrome96OrMore req) "credentialless"
else "require-corp")
)
protected def NoCache(res: Result): Result =

1
modules/common/src/main/HTTPRequest.scala
View File

@ -45,6 +45,7 @@ object HTTPRequest {
private def uaContains(req: RequestHeader, str: String) = userAgent(req).exists(_ contains str)
def isChrome(req: RequestHeader) = uaContains(req, "Chrome/")
val isChrome96OrMore = UaMatcher("""Chrome/(?:\d{3,}|9[6-9])""")
def origin(req: RequestHeader): Option[String] = req.headers get HeaderNames.ORIGIN