Skip to content

fix(windows): keep sandboxed iframes in-process so the markdown viewer loads - #751

Merged
abose merged 1 commit into
mainfrom
fix/webview2-sandboxed-iframe-isolation
Oct 24, 2026
Merged

abose merged 1 commit into
mainfrom
fix/webview2-sandboxed-iframe-isolation

Conversation

@abose

@abose abose commented Oct 24, 2026

Copy link
Copy Markdown
Member

WebView2 moves iframes sandboxed without allow-same-origin out of process when IsolateSandboxedIframes is on. wry 0.24 registers the phtauri filter without request source kinds, so the markdown viewer's scripts and styles bypass the protocol handler and the viewer never loads. Microsoft turns the feature off by server config today, but it is on for fresh profiles and can be re-enabled remotely at any time.

Disable it for every window through WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS, appended to wry's defaults. Windows only; other platforms are unchanged.

…r loads

WebView2 moves iframes sandboxed without allow-same-origin out of process
when IsolateSandboxedIframes is on. wry 0.24 registers the phtauri filter
without request source kinds, so the markdown viewer's scripts and styles
bypass the protocol handler and the viewer never loads. Microsoft turns the
feature off by server config today, but it is on for fresh profiles and
can be re-enabled remotely at any time.

Disable it for every window through WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS,
appended to wry's defaults. Windows only; other platforms are unchanged.
@sonarqubecloud

Copy link
Copy Markdown

@abose
abose merged commit 4e34fa5 into main Oct 24, 2026
2 of 6 checks passed
@abose
abose deleted the fix/webview2-sandboxed-iframe-isolation branch October 24, 2026 07:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant