try cross-origin isolation only on sites

KernelDeimos · KernelDeimos · commit e58da265ba30 · 2024-07-18T20:58:09.000-04:00
diff --git a/src/backend/src/services/WebServerService.js b/src/backend/src/services/WebServerService.js
@@ -392,7 +392,7 @@ class WebServerService extends BaseService {
             // NOTE: This is put behind a configuration flag because we
             //       need some experimentation to ensure the interface
             //       between apps and Puter doesn't break.
-            if ( config.cross_origin_isolation ) {
+            if ( config.cross_origin_isolation && is_site ) {
                 res.setHeader('Cross-Origin-Opener-Policy', 'same-origin');
                 res.setHeader('Cross-Origin-Embedder-Policy', 'require-corp');
             }

Original file line number	Diff line number	Diff line change
`@@ -392,7 +392,7 @@ class WebServerService extends BaseService {`
`392`	`392`	`// NOTE: This is put behind a configuration flag because we`
`393`	`393`	`// need some experimentation to ensure the interface`
`394`	`394`	`// between apps and Puter doesn't break.`
`395`		`- if ( config.cross_origin_isolation ) {`
	`395`	`+ if ( config.cross_origin_isolation && is_site ) {`
`396`	`396`	`res.setHeader('Cross-Origin-Opener-Policy', 'same-origin');`
`397`	`397`	`res.setHeader('Cross-Origin-Embedder-Policy', 'require-corp');`
`398`	`398`	`}`