From f5ef068eed9e55d76faa460e965c73fd77e15c2b Mon Sep 17 00:00:00 2001 From: Kam Date: Sat, 6 Jun 2026 11:10:47 +0300 Subject: [PATCH] fix(docs-infra): load cross-origin video embeds under COEP credentialless adev is cross-origin isolated (COOP same-origin + COEP require-corp) so the embedded WebContainer editor can use SharedArrayBuffer. Under require-corp the cross-origin YouTube iframe in `` only loaded in Chromium, leaving the player blank in Safari. Switch COEP from `require-corp` to `credentialless`. The page stays cross-origin isolated, so the editor keeps working, but cross-origin frames are now allowed to load, which restores the inline player in Safari as well. --- adev/angular.json | 2 +- adev/firebase.json | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/adev/angular.json b/adev/angular.json index 8c05efc6034e..2d2e45f6c6ce 100644 --- a/adev/angular.json +++ b/adev/angular.json @@ -70,7 +70,7 @@ "buildTarget": "web-ui:build", "headers": { "Cross-Origin-Opener-Policy": "same-origin", - "Cross-Origin-Embedder-Policy": "require-corp" + "Cross-Origin-Embedder-Policy": "credentialless" } } }, diff --git a/adev/firebase.json b/adev/firebase.json index 0d336b80ca1e..3ba13c219db8 100644 --- a/adev/firebase.json +++ b/adev/firebase.json @@ -49,7 +49,7 @@ "headers": [ { "key": "Cross-Origin-Embedder-Policy", - "value": "require-corp" + "value": "credentialless" } ] }, @@ -71,7 +71,7 @@ }, { "key": "Cross-Origin-Embedder-Policy", - "value": "require-corp" + "value": "credentialless" } ] }