Changeset a3e0746 in Klonkt

Timestamp:

06/27/2026 09:02:29 AM (2 months ago)

Author:

Robin Genis <roboburr@…>

Branches:

main

Children:

ca0ad44

Parents:

cb95343

Message:

fix(sw): do not intercept cross-origin iframe navigations (PWA embeds)

• server.js — the /sw.js fetch handler now skips cross-origin navigate requests, so YouTube/Spotify/SoundCloud embed iframes load natively in the installed PWA (which is always SW-controlled) instead of getting an opaque/blank response; bump CACHE_VERSION v15->v16 to roll the service worker.

File:

• src/server.js (modified) (2 diffs)

src/server.js

@@ -395 +395 @@
   res.set('Cache-Control', 'no-cache');
   res.send(`
-const CACHE_VERSION = 'pcms-v15-' + new Date().toISOString().split('T')[0];
+const CACHE_VERSION = 'pcms-v16-' + new Date().toISOString().split('T')[0];
 self.addEventListener('install', e => {
   e.waitUntil(caches.open(CACHE_VERSION).then(c => c.addAll(['/'])));
@@ -414 +414 @@
   if (e.request.method !== 'GET') return;
   if (e.request.mode !== 'navigate') return; // page loads only
+  // Same-origin ONLY. A cross-origin navigate request is an <iframe> embed
+  // (YouTube/Spotify/SoundCloud …) — routing those through the SW yields an
+  // opaque/altered response the iframe cannot render → blank embeds in the
+  // installed PWA (which is always SW-controlled). Let the browser load them.
+  try { if (new URL(e.request.url).origin !== self.location.origin) return; } catch (err) { return; }
   e.respondWith(
     fetch(e.request).catch(() => caches.match('/').then(r => r || Response.error()))