Custom widgets CORS issue in Safari is still persists even after latest release of developer portal version 2.29.0

[girish-tank-avnet]

[!IMPORTANT] PLEASE DO NOT CREATE ISSUES RELATED TO MANAGED DEVELOPER PORTAL IN THIS REPOSITORY. Issues related to "Managed developer portal" will be closed automatically. Managed developer portal issues should be created directly in Azure Support + Troubleshooting in Azure portal. Contact Azure support (or) submit a post on Stack Overflow. Feature requests can be raised on the Azure Feedback Forum.

Every self-hosted developer bug report should have precise description and reproduction steps; console traces (or) source code references are appreciated.

Bug description

Custom widgets CORS issue in Safari is still persists

Reproduction steps

1. Go to 'https://apiportal.avnet.com'
2. Click on 'Signup' page.
3. Sign up widget is custom widget and it is not loading as CORS error is generated.
4. See error as per attached image.

Expected behavior

Signup Custom widget should be load properly. as latest release of developer portal.

this is managed developer portal but as latest release of managed developer portal, custom widget issue in Mac OD - Safari has been resolved in "api-management-developer-portal" - release version 2.29.0 (commit id https://github.com/Azure/api-management-developer-portal/pull/2498)

as this developer portal changes is already released on my APIM, it should be reflected over there.

Is self-hosted portal?

No.

Release tag or commit SHA.

Release version : 2.29.0 Commit id: https://github.com/Azure/api-management-developer-portal/pull/2498 (commit: 0ab6508eba4967ef82e48163aa20a18748fa28ea)

API Management service name

avt-prd-wus2-apim-002

Environment

• Operating system: Mac OS (OS version Sonoma 14.5)
• Browser: Safari
• Version: 17.5

Additional context

Please find the attached screenshot.

[mpodriezov]

Hi, the fix seems to be not deployed.

The sanbox attribute on the iframe is not changed from "allow-same-origin allow-scripts allow-modals allow-forms allow-popups allow-popups-to-escape-sandbox allow-top-navigation allow-pointer-lock" to - "allow-scripts allow-modals allow-forms allow-popups allow-popups-to-escape-sandbox allow-top-navigation allow-pointer-lock allow-downloads".

I will check the status.

[mpodriezov]

Sorry, everything is up to date. There is some issue with this approach.. checking it..

[sw-ms-girishtank]

@mpodriezov Thanks for quick response..... please let me know here your investigation... Apart from this? what does mean of below screenshot?

was this issue tested in Mac OS X and Safari version 537.46??