microsoft / microsoft/vscode-livepreview

Make sure CORP headers are sent

Open
#560 8 comments 0 reactions 1 assignee View on GitHub

@andreamah is already working on this.

Since Oct 26, 2023.

feature-request verification-needed
Dominant language
TypeScript
Stars
596
Forks
119
Avg merge
1d 4m
Merged PRs (30d)
5

Description

With the adoption of Cross Origin Isolation in vscode.dev and github.dev, servers which serve content to those pages need to send in the CORP header as well. Something as simple as this should do it:

Cross-Origin-Resource-Policy: cross-origin

To validate:

  1. Open a Codespace
  2. Append to the URL ?vscode-coi=on and submit
  3. Install the LivePreview extension
  4. Preview an HTML file

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.