• Resolved Alan Sillitoe

    (@sillitoe)


    I’m not sure if this is related to the previous post “Cannot Choose Source“, but there appears to be a problem selecting the photo or album source on Flickr (and perhaps other sources) using the Google Chrome browser, whereas it works on other browsers such as Firefox. This appears to be due to a recent tightening of the security features in Chrome, resulting in a Cross-Origin Frame Access violation.

    I think Chrome’s recent changes in the security rules (as of 2026) forbid a script from one’s own domain from reading the content of a window that belongs to another domain (Flickr).

    I think that because the Flickr settings in Photonic only take an API Key and Secret, the “handshake” is happening entirely through JavaScript in the browser, which is where Chrome is blocking it.

    If that is indeed the problem, is there any way to fix it?

    Many thanks,

    Alan

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Author Sayontan Sinha

    (@sayontan)

    Cross-Origin behaviour is not triggered in between the Wizard and Flickr; in fact, for the screen you are on, no communication has happened with Flickr yet. Expanding further, none of Photonic’s communication happens cross-origin. Web-service or API-based communication happens in the back-end PHP, not the front-end JavaScript.

    As with my question / suggestion on the other thread, do you have Gutenberg installed separately? If yes, can you turn that off?

    Thread Starter Alan Sillitoe

    (@sillitoe)

    Thank you for your reply, Sayontan. I see. It must be another problem then. However, it only seems to occur on the Chrome browser and my colleague who reported this said he hadn't used this website for a few months, which seemed to correspond to some possible changes in Chrome.  

    I have the Gutenberg extension installed but not activated.

    When I load the Add Photonic Gallery window in the editor, I get the error below.

    Thanks anyway for your quick reply.

    Best wishes,

    Alan

    load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils,wp-polyfill&ver=6.9.4:5 JQMIGRATE: Migrate is installed, version 3.4.1
    load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils,wp-polyfill&ver=6.9.4:2 Uncaught SecurityError: Failed to read a named property 'document' from 'Window': Blocked a frame with origin "https://france.upf.org" from accessing a cross-origin frame.
    at HTMLDocument.<anonymous> (wizard.js?ver=20260328-72702:13:2)
    at e (load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils,wp-polyfill&ver=6.9.4:2:27028)
    at t (load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils,wp-polyfill&ver=6.9.4:2:27330)
    (anonymous) @ wizard.js?ver=20260328-72702:13
    e @ load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils,wp-polyfill&ver=6.9.4:2
    t @ load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils,wp-polyfill&ver=6.9.4:2
    setTimeout
    (anonymous) @ load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils,wp-polyfill&ver=6.9.4:2
    c @ load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils,wp-polyfill&ver=6.9.4:2
    fireWith @ load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils,wp-polyfill&ver=6.9.4:2
    fire @ load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils,wp-polyfill&ver=6.9.4:2
    c @ load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils,wp-polyfill&ver=6.9.4:2
    fireWith @ load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils,wp-polyfill&ver=6.9.4:2
    ready @ load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils,wp-polyfill&ver=6.9.4:2
    P @ load-scripts.php?c=0&load%5Bchunk_0%5D=jquery-core,jquery-migrate,utils,wp-polyfill&ver=6.9.4:2
    /wp-admin/admin.php?action=photonic_wizard&class=photonic-flow&post_id=20409&nonce=15b0716ef3&width=1000&height=600:268 GET https://france.upf.org/wp-admin/remote 404 (Not Found)
    jquery-migrate.min.js?ver=3.4.1:2 JQMIGRATE: Migrate is installed, version 3.4.1
    complianz.min.js?ver=1770145816:1 opt-in

    Plugin Author Sayontan Sinha

    (@sayontan)

    Apologies for the delay in responding. I have been trying to replicate this, but have not been successful.

    However, I have been working on making changes to the plugin to support cross-origin requests better, that will hopefully eliminate these errors. I should have a new update available for you by this evening or tomorrow.

    Thread Starter Alan Sillitoe

    (@sillitoe)

    Thank you very much Sayontan. I must say I don’t know where this problem is coming from and will try out the updated version. Could it have anything to do with the version of Chrome? Mine is: Version 147.0.7727.50 (Build officiel) (64 bits)

    Plugin Author Sayontan Sinha

    (@sayontan)

    I released version 3.30 last evening. Please let me know if that helps with your issue.

    Thread Starter Alan Sillitoe

    (@sillitoe)

    That seems to have done the trick. Thank you so much! I’ll double check with the person running the website in question just to be sure.

    Thread Starter Alan Sillitoe

    (@sillitoe)

    Dear Sayontan, my colleague confirmed that it’s now working for him. Thank you so much for your help. Best wishes, Alan

Viewing 7 replies - 1 through 7 (of 7 total)

You must be logged in to reply to this topic.