Jitsi-meet: SecurityError for video call in iframe if 3rd party cookies are disabled - default configuration

[duche]

Hi,
With the last version on my chrome browser, when I embed jitsi-meet with the API ... I have this error :

---

Logger.js:154 2020-03-21T10:48:00.841Z [modules/util/JitsiLocalStorage.js] >: DOMException: Failed to read the 'localStorage' property from 'Window': Access is denied for this document.
at new (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:29:149842)
at Object. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:29:149781)
at Object. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:29:150037)
at n (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:1:110)
at Object. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:54:96821)
at n (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:1:110)
at Object. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:24:94648)
at n (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:1:110)
at Object. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:29:174520)
at n (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:1:110)
at Object. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:24:204405)
at n (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:1:110)
at Object. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:29:148433)
at n (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:1:110)
at Object. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:24:145657)
at n (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:1:110)
at Object. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:63:41327)
at n (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:1:110)
at Object. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:54:51806)
at Object. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:54:54214)
at n (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:1:110)
at Object. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:54:163490)
at Object. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:54:165154)
at n (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:1:110)
at Object. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:126:292380)
at Object. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:126:322220)
at n (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:1:110)
at Module. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:222:80217)
at n (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:1:110)
at https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:1:908
at https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:1:919
o @ Logger.js:154
Logger.js:154 2020-03-21T10:48:00.842Z [features/local-recording] : Failed to parse localStorage item.
o @ Logger.js:154
Logger.js:154 2020-03-21T10:48:00.922Z [index.web] >: (TIME) document ready: 509.4849999877624
react-dom.production.min.js:187 DOMException: Failed to read the 'localStorage' property from 'Window': Access is denied for this document.
at xe._initStorage (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:16:62974)
at xe.componentDidMount (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:16:62604)
at xe.componentDidMount (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:24:213811)
at Gs (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:94889)
at t.unstable_runWithPriority (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:192:3884)
at fi (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:41540)
at Ws (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:90890)
at Ms (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:78509)
at fc (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:105337)
at hc (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:105412)
at https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:106607
at Bs (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:80044)
at _c (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:106592)
at Object.render (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:109864)
at HTMLDocument. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:222:80940)
La @ react-dom.production.min.js:187
react-dom.production.min.js:114 Uncaught DOMException: Failed to read the 'localStorage' property from 'Window': Access is denied for this document.
at xe._initStorage (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:16:62974)
at xe.componentDidMount (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:16:62604)
at xe.componentDidMount (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:24:213811)
at Gs (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:94889)
at t.unstable_runWithPriority (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:192:3884)
at fi (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:41540)
at Ws (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:90890)
at Ms (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:78509)
at fc (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:105337)
at hc (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:105412)
at https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:106607
at Bs (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:80044)
at _c (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:106592)
at Object.render (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:184:109864)
at HTMLDocument. (https://web-cdn.jitsi.net/meetjitsi_3888.560/libs/app.bundle.min.js?v=3888.560:222:80940)
register-sw.js:4 SuperPWA service worker ready
react-dom.production.min.js:187 TypeError: Cannot read property 'dispatch' of undefined
at xe.componentWillUnmount (BaseApp.js:100)
at react-dom.production.min.js:187
at Ra (react-dom.production.min.js:189)
at Ua (react-dom.production.min.js:195)
at Gs (react-dom.production.min.js:235)
at t.unstable_runWithPriority (scheduler.production.min.js:20)
at fi (react-dom.production.min.js:113)
at Ws (react-dom.production.min.js:230)
at Ls (react-dom.production.min.js:206)
at react-dom.production.min.js:114
at t.unstable_runWithPriority (scheduler.production.min.js:20)
at fi (react-dom.production.min.js:113)
at gi (react-dom.production.min.js:114)
at mi (react-dom.production.min.js:113)
at Bs (react-dom.production.min.js:208)
at _c (react-dom.production.min.js:272)
at Object.render (react-dom.production.min.js:273)
at HTMLDocument. (index.web.js:25)
La @ react-dom.production.min.js:187
scheduler.production.min.js:14 Uncaught TypeError: Cannot read property 'dispatch' of undefined
at xe.componentWillUnmount (BaseApp.js:100)
at react-dom.production.min.js:187
at Ra (react-dom.production.min.js:189)
at Ua (react-dom.production.min.js:195)
at Gs (react-dom.production.min.js:235)
at t.unstable_runWithPriority (scheduler.production.min.js:20)
at fi (react-dom.production.min.js:113)
at Ws (react-dom.production.min.js:230)
at Ls (react-dom.production.min.js:206)
at react-dom.production.min.js:114
at t.unstable_runWithPriority (scheduler.production.min.js:20)
at fi (react-dom.production.min.js:113)
at gi (react-dom.production.min.js:114)
at mi (react-dom.production.min.js:113)
at Bs (react-dom.production.min.js:208)
at _c (react-dom.production.min.js:272)
at Object.render (react-dom.production.min.js:273)
at HTMLDocument. (index.web.js:25)

---

If I activate third cookie on option, all was good, but it's not a default option, so If you have a solution or configuration or a possibility to open video on other mode ....

Thank's a lot

[saghul]

@hristoterezov any chance you could take a look at this? This seems to only happen when using the iframe API from an untrusted origin (so not localhost) in newer Chromes, if the option for blocking 3rd party cookies is set. It seems like the localStorage option is not usable.

We should probably survive and not use it at all in that case...

[tdelmas]

@saghul For information, in Private mode, some browsers do not support localStorage.

[saghul]

@tdelmas Hey tom, can you provide an example?

[tdelmas]

@saghul : Safari. I don't have a device to test now, but I remember it did raised an exception. Maybe new version handle it differently but still prevent you from using it apparently:

https://developer.mozilla.org/en-US/docs/Web/API/Web_Storage_API#Private_Browsing_Incognito_modes

https://github.com/marcj/angular2-localstorage/issues/73

[luke3butler]

I've created a platform that uses Jitsi for video, and have at least one user that ran into this this issue. The exception happens prior to asking for webcam/video access and the iframe is completely empty as far as I can tell.

Edit: Latest Chrome (stable channel), Windows 10.

[saghul]

Got it, thanks for confirming. Looks like what we need to do is just not use localStorage in that case. Or rather, be resilient about it.

[radiospiel]

Just wanted to confirm that this is the case with chrome v80. Also this is a dupe of #547

[JitsingHazard]

i can confirm we have the same issue with embedded Jitsi Meet component (via JitsiMeetExternalAPI)

[hristoterezov]

This should be fixed in the latest master and on meet.jit.si. Could you guys please verify?

[radiospiel]

Thank you @hristoterezov I currently run against servers installed from stable, but as soon as time permits I will get back here.

[duche]

Thank's a lot for the change, I have made some test with "meet.jit.si" and iframe on my Wordpress website, all seem's good. No error with permission.
I made other test now with a WP plugin buddymeet to see if it is good too.

Thank's for the evolution.

[saghul]

Thanks folks! I'm gloing to close this then. Holler if we need to reopen.