AMT-Cheif
/
drift
mirror of https://github.com/AMT-Cheif/drift.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Highlight warning more

This commit is contained in:
Simon Binder 2023-07-06 21:58:45 +02:00
parent 0de1e43409
commit f6f2d54190
No known key found for this signature in database
GPG Key ID: 7891917E4147B8C0
1 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
docs/pages/docs/Other engines/web.md
View File

@ -108,12 +108,21 @@ Unfortunately, there's no way (that I'm aware of) to add these headers onto `flu
Drift will fall back to a (slightly slower) implementation in that case (see [storages](#storages)), Drift will fall back to a (slightly slower) implementation in that case (see [storages](#storages)),
but we recommend researching and enabling these headers in production if possible. but we recommend researching and enabling these headers in production if possible.
Note that Safari 16 has an [unfortunate bug](https://bugs.webkit.org/show_bug.cgi?id=245346) {% block "blocks/alert" title="Downsides of COOP and COEP" color="danger" %}
While these headers are required for the origin-private FileSystem Access API
and bring a security benefit, there are some known problems:
- These headers are incompatible with some other packages opening popups,
such as the ones used for [Google Auth](https://developers.google.com/identity/gsi/web/guides/get-google-api-clientid?hl=en#cross_origin_opener_policy).
- Safari 16 has an [unfortunate bug](https://bugs.webkit.org/show_bug.cgi?id=245346)
preventing dedicated workers to be loaded from cache with these headers. However, shared and service workers preventing dedicated workers to be loaded from cache with these headers. However, shared and service workers
are unaffected by this. are unaffected by this.
These headers are incompatible with [Google Auth Please carefully test your app with these headers to evaluate whether you might
Popups](https://developers.google.com/identity/gsi/web/guides/get-google-api-clientid#:~:text=com%2Fgsi%2F%3B-,Cross%20Origin%20Opener%20Policy,popup%20window%20or%20similar%20bugs.). be affected by these limitations.
If the headers break your app, you should not enable them - drift will fall back
to another (potentially slower) implementation in that case.
{% endblock %}
### Setup in Dart ### Setup in Dart