react-focus-lock with [email protected] throws when focus taken from cross-origin iframe

[chekrd]

Hi, go to https://codesandbox.io/s/focus-lock-fail-4gkvyx?file=/src/App.tsx and press Click.

In [email protected] nothing happens, but in @2.9.3 because of this, I assume, it throws and can break the app.

How can I achieve some kind of "try and swallow" approach?

[theKashey]

Yep, you cannot and that's a serious regression. Look like I've broken internet one another time 🎉

[nebrius]

We ran into this issue too, but pinning focus-lock to version 0.11.3 worked around the issue for us. Looking forward to the fix when you get a chance, and thanks for your work!

[chekrd]

Yes, because react-focus-lock has dependency "focus-lock": "^0.doesNotMatter", all versions of react-focus-lock can be affected. The issue should be moved into the focus-lock repository.

The workaround is to install explicit versions in your package.json:
"react-focus-lock": "2.9.2", ([email protected] requires focus-lock of version ^0.11.5)
"focus-lock": "0.11.4"

[theKashey]

An update to focus-lock(0.11.6) and react-focus-lock(2.9.4) has been released.

There is still no test securing the right behaviour as JSDOM does not support cross-origin security concerns - jsdom/jsdom#1892

I will add real Browser tests, at least a few, shortly - #242