From b2e829c2d9c7f22ab45c8a6d98818d728bb48839 Mon Sep 17 00:00:00 2001 From: Thomas Steiner Date: Mon, 6 Jul 2026 16:08:39 +0200 Subject: [PATCH 1/2] Allow all `origins` for cross-origin storage --- packages/transformers/src/utils/cache/CrossOriginStorageCache.js | 1 + 1 file changed, 1 insertion(+) diff --git a/packages/transformers/src/utils/cache/CrossOriginStorageCache.js b/packages/transformers/src/utils/cache/CrossOriginStorageCache.js index 492bf9a72..280f0600c 100644 --- a/packages/transformers/src/utils/cache/CrossOriginStorageCache.js +++ b/packages/transformers/src/utils/cache/CrossOriginStorageCache.js @@ -112,6 +112,7 @@ export class CrossOriginStorage { _storeBlobInCOS = async (blob, hashHex) => { const handle = await navigator.crossOriginStorage.requestFileHandle(makeHashDescriptor(hashHex), { create: true, + origins: '*', }); const writableStream = await handle.createWritable(); await writableStream.write(blob); From e5e527866e219b7c147477a7c8fb1482bc55bb84 Mon Sep 17 00:00:00 2001 From: Thomas Steiner Date: Wed, 8 Jul 2026 13:26:02 +0200 Subject: [PATCH 2/2] fix(cos): add missing origins field to CrossOriginStorageRequestFileHandleOptions type --- .../src/utils/cache/cross-origin-storage.d.ts | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/packages/transformers/src/utils/cache/cross-origin-storage.d.ts b/packages/transformers/src/utils/cache/cross-origin-storage.d.ts index 979775cf7..b1b7ca17d 100644 --- a/packages/transformers/src/utils/cache/cross-origin-storage.d.ts +++ b/packages/transformers/src/utils/cache/cross-origin-storage.d.ts @@ -17,6 +17,15 @@ interface CrossOriginStorageRequestFileHandleHash { */ interface CrossOriginStorageRequestFileHandleOptions { create?: boolean; + /** + * Restricts (or opens up) which origins may later read the stored file. + * `'*'` makes the resource available to all origins; an array of origin + * strings restricts it to that set; omitting the field keeps the + * default (same-site only). Visibility can be upgraded but never + * downgraded. + * @see https://github.com/WICG/cross-origin-storage#example-restricting-resources-to-specific-origins + */ + origins?: '*' | string[]; } /**