jgraph / drawio

draw.io is a JavaScript, client-side editor for general diagramming.
https://www.drawio.com
Other
40.55k stars 7.56k forks source link

Firefox - Partitioned cookie or storage access was provided to “https://embed.diagrams.net/?proto=json&spin=1&ui=min&libraries=1&libs=c4;threatModeling” because it is loaded in the third-party context and dynamic state partitioning is enabled. #3457

Closed Ogglas closed 1 year ago

Ogglas commented 1 year ago

Is your feature request related to a problem? Please describe.

When using drawio-integration I get the following warning from Firefox Developer Tools Console that I have not seen before:

Partitioned cookie or storage access was provided to “https://embed.diagrams.net/?proto=json&spin=1&ui=min&libraries=1&libs=c4;threatModeling” because it is loaded in the third-party context and dynamic state partitioning is enabled. [Learn More]

To Reproduce Steps to reproduce the behavior:

Register on https://app.oplane.io/, open a product and edit a diagram in Firefox.

Describe the solution you'd like

Does embed.diagrams.net need to access cookies or storage if editing an embedded SVG image in a HTML page? If not then I would like drawio to not demand access to these resources.

Screenshots

image

davidjgraph commented 1 year ago

I'd prefer not to register on some web site I don't trust with my github email. Do you have a simpler set of reproduction steps?

Ogglas commented 1 year ago

@davidjgraph Fully understandable. I could try to write a minimalistic project which reproduces this issue but the absolute fastest way would be to provide you with a test account. Is there anywhere I can send this to you in a PM?