From b6a42ac8d24f46a309ca6174daca875458bd0af8 Mon Sep 17 00:00:00 2001 From: Raphael Michel Date: Mon, 22 Apr 2024 13:15:33 +0200 Subject: [PATCH] Widget: Document and improve situation around COEP (Z#23149909) (#4051) --- doc/user/events/widget.rst | 13 +++++++++++-- .../templates/pretixcontrol/event/widget.html | 4 ++-- src/pretix/presale/views/widget.py | 3 +++ src/pretix/static/pretixpresale/js/widget/widget.js | 6 +++++- 4 files changed, 21 insertions(+), 5 deletions(-) diff --git a/doc/user/events/widget.rst b/doc/user/events/widget.rst index eb1aa307ad..b3c8f38917 100644 --- a/doc/user/events/widget.rst +++ b/doc/user/events/widget.rst @@ -17,8 +17,8 @@ and then click "Generate widget code". You will obtain two code snippets that look *roughly* like the following. The first should be embedded into the ```` part of your website, if possible. If this inconvenient, you can put it in the ```` part as well:: - - + + The second snippet should be embedded at the position where the widget should show up:: @@ -449,5 +449,14 @@ Further reading: * `Stripe Payment Method Domain registration`_ +Working with Cross-Origin-Embedder-Policy +----------------------------------------- + +The pretix widget is unfortunately not compatible with ``Cross-Origin-Embedder-Policy: require-corp``. If you include +the ``crossorigin`` attributes on the ``