diff --git a/packages/flutter_tools/lib/src/isolated/devfs_web.dart b/packages/flutter_tools/lib/src/isolated/devfs_web.dart index eab00a94dc..690278ba67 100644 --- a/packages/flutter_tools/lib/src/isolated/devfs_web.dart +++ b/packages/flutter_tools/lib/src/isolated/devfs_web.dart @@ -1196,7 +1196,7 @@ class ReleaseAssetServer { 'Access-Control-Allow-Origin': '*', if (_needsCoopCoep && _fileSystem.path.extension(file.path) == '.html') ...{ 'Cross-Origin-Opener-Policy': 'same-origin', - 'Cross-Origin-Embedder-Policy': 'require-corp', + 'Cross-Origin-Embedder-Policy': 'credentialless', } }); } @@ -1208,7 +1208,7 @@ class ReleaseAssetServer { 'Content-Type': 'text/html', if (_needsCoopCoep) ...{ 'Cross-Origin-Opener-Policy': 'same-origin', - 'Cross-Origin-Embedder-Policy': 'require-corp', + 'Cross-Origin-Embedder-Policy': 'credentialless', }, }); } diff --git a/packages/flutter_tools/lib/src/test/flutter_web_platform.dart b/packages/flutter_tools/lib/src/test/flutter_web_platform.dart index c319132ed0..60697bd603 100644 --- a/packages/flutter_tools/lib/src/test/flutter_web_platform.dart +++ b/packages/flutter_tools/lib/src/test/flutter_web_platform.dart @@ -64,7 +64,7 @@ shelf.Handler createDirectoryHandler(Directory directory, { required bool crossO if (needsCrossOriginIsolated) ...{ 'Cross-Origin-Opener-Policy': 'same-origin', - 'Cross-Origin-Embedder-Policy': 'require-corp', + 'Cross-Origin-Embedder-Policy': 'credentialless', }, }, ); @@ -539,7 +539,7 @@ class FlutterWebPlatform extends PlatformPlugin { if (webRenderer == WebRendererMode.skwasm) ...{ 'Cross-Origin-Opener-Policy': 'same-origin', - 'Cross-Origin-Embedder-Policy': 'require-corp', + 'Cross-Origin-Embedder-Policy': 'credentialless', } }); } diff --git a/packages/flutter_tools/test/general.shard/web/web_asset_server_test.dart b/packages/flutter_tools/test/general.shard/web/web_asset_server_test.dart index 7b9f4c9f8b..aaeacef1a2 100644 --- a/packages/flutter_tools/test/general.shard/web/web_asset_server_test.dart +++ b/packages/flutter_tools/test/general.shard/web/web_asset_server_test.dart @@ -160,7 +160,7 @@ void main() { expect(response.statusCode, HttpStatus.ok); final Map headers = response.headers; expect(headers['Cross-Origin-Opener-Policy'], 'same-origin'); - expect(headers['Cross-Origin-Embedder-Policy'], 'require-corp'); + expect(headers['Cross-Origin-Embedder-Policy'], 'credentialless'); }); testWithoutContext('release asset server serves html content without COOP/COEP headers when specified', () async {