fix(docs-infra): load cross-origin video embeds under COEP credentialless

erkamyaman · atscott · commit 86cd1661413d · 2026-06-09T13:26:18.000-07:00
adev is cross-origin isolated (COOP same-origin + COEP require-corp) so the
embedded WebContainer editor can use SharedArrayBuffer. Under require-corp the
cross-origin YouTube iframe in `&lt;docs-video&gt;` only loaded in Chromium, leaving
the player blank in Safari.

Switch COEP from `require-corp` to `credentialless`. The page stays cross-origin
isolated, so the editor keeps working, but cross-origin frames are now allowed
to load, which restores the inline player in Safari as well.
diff --git a/adev/angular.json b/adev/angular.json
@@ -70,7 +70,7 @@
             "buildTarget": "web-ui:build",
             "headers": {
               "Cross-Origin-Opener-Policy": "same-origin",
-              "Cross-Origin-Embedder-Policy": "require-corp"
+              "Cross-Origin-Embedder-Policy": "credentialless"
             }
           }
         },
diff --git a/adev/firebase.json b/adev/firebase.json
@@ -49,7 +49,7 @@
         "headers": [
           {
             "key": "Cross-Origin-Embedder-Policy",
-            "value": "require-corp"
+            "value": "credentialless"
           }
         ]
       },
@@ -71,7 +71,7 @@
           },
           {
             "key": "Cross-Origin-Embedder-Policy",
-            "value": "require-corp"
+            "value": "credentialless"
           }
         ]
       }

Original file line number	Diff line number	Diff line change
`@@ -70,7 +70,7 @@`
`70`	`70`	`"buildTarget": "web-ui:build",`
`71`	`71`	`"headers": {`
`72`	`72`	`"Cross-Origin-Opener-Policy": "same-origin",`
`73`		`- "Cross-Origin-Embedder-Policy": "require-corp"`
	`73`	`+ "Cross-Origin-Embedder-Policy": "credentialless"`
`74`	`74`	`}`
`75`	`75`	`}`
`76`	`76`	`},`
Original file line number	Diff line number	Diff line change
`@@ -49,7 +49,7 @@`
`49`	`49`	`"headers": [`
`50`	`50`	`{`
`51`	`51`	`"key": "Cross-Origin-Embedder-Policy",`
`52`		`- "value": "require-corp"`
	`52`	`+ "value": "credentialless"`
`53`	`53`	`}`
`54`	`54`	`]`
`55`	`55`	`},`
`@@ -71,7 +71,7 @@`
`71`	`71`	`},`
`72`	`72`	`{`
`73`	`73`	`"key": "Cross-Origin-Embedder-Policy",`
`74`		`- "value": "require-corp"`
	`74`	`+ "value": "credentialless"`
`75`	`75`	`}`
`76`	`76`	`]`
`77`	`77`	`}`