Cross-Origin iFrame Bug

[mgreminger]

Description

When a page with a math-field element is embedded in an iframe on a site at a different origin, keyboard input into the math-field does not work and generates console errors. I've created a minimum reproduction on code-pen here. The issue is also shown in the screen recording below:

Screen.Recording.2023-05-23.at.9.58.10.AM.mov

MathLive version
0.94.3

Operating System
All

Browser
All

[arnog]

I'm not sure I have a complete fix. AFAICT the CodePen you have cannot fully work, since the cross-origin policy correctly prevents access between the frame and the host document. However, I have implemented some resilience so that no runtime error will be generated. The virtual keyboard will not be functional in the embedded frame in this situation, though.

[mgreminger]

Thanks for the fix, I'll try it out. Yes, you're correct, the virtual keyboard needs same origin to work. I just need the physical keyboard input to work. I'll attempt to create a test for this as well.

[mgreminger]

Yes, that did the trick, thanks! I just submitted a pull request to add a cross-origin iframe test that uses the physical keyboard. This is in addition to the current same-origin iframe test that uses the virtual keyboard.

[arnog]

OK, great. Thanks for the tests!