Enable Shared Array Buffer in Cross-Domain

Question

I am facing a problem, SAB(SharedArrayBuffer) does not work in cross-domain environment. Target IFrame's source is on another domain, I added aliases to hosts file(Windows OS). I am sending SAB through postMessage to IFrame, but it simply does not either send or receive. If IFrame's source is something like this: "./frames/frame.html", SAB starts magically work. What can be done to make SAB work in cross-domain?

I am using Google Chrome, in Console window it does not show errors. When using Firefox, it provides this error: Cannot post message containing a shared memory object to a cross-origin window.

Website is hosted using webpack with headers:

Cross-Origin-Opener-Policy : same-origin
Cross-Origin-Embedder-Policy : require-corp

@BrownieInMotion Yes, I also created certificate for all domains and added that certificate to trusted in Windows OS. — moraprex
– moraprex, Commented Aug 8, 2022 at 9:53
Have you tried also sending a Cross-Origin-Resource-Policy: cross-origin response header? — sideshowbarker
– sideshowbarker, Commented Aug 8, 2022 at 11:00
@Kaiido I haven’t looked yet at the relevant spec bits to know what the expected behavior should be per-spec — sideshowbarker
– sideshowbarker, Commented Aug 9, 2022 at 9:43

Marc T. · Accepted Answer · 2022-12-27 23:01:34Z

1

If your cross-domain environment consists of subdomains to the same parent domain (e.g. one.domain.com and two.domain.com) or even sub.domain.com and domain.com then this shows precisely which headers you need to set up on each domain: https://stackoverflow.com/a/74923275/7326344

In the iframe's .htaccess (on sub.domain.com) I needed:

Header set Cross-Origin-Embedder-Policy "require-corp"
Header set Cross-Origin-Opener-Policy "same-origin"
Header set Cross-Origin-Resource-Policy "same-site"

In the root document's .htaccess (on domain.com) I needed:

Header set Cross-Origin-Embedder-Policy "require-corp"
Header set Cross-Origin-Opener-Policy "same-origin"

edited Dec 27, 2022 at 23:01

answered Dec 26, 2022 at 19:38

Marc T.

5111 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

ahuemmer Over a year ago

While this link may answer the question, it is better to include the essential parts of the answer here and provide the link for reference. Link-only answers can become invalid if the linked page changes. - From Review

Collectives™ on Stack Overflow

Enable Shared Array Buffer in Cross-Domain

1 Answer 1

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related