Google Console SharedArrayBuffers

  • Resolved lechon

    (@lechon)


    4 years ago

    Hello,

    We recently updated Litespeed cache and we got this message from Google Search Console:
    (we are also using a LiteSpeed server).

    We manage other sites, but this is the only site that we manage that uses a Litespeed server with a Litespeed cache, and since this just came up after the most recent update we wanted to find out if this is related before we go on a hunt to try figure this out.

    Google Search Console:
    New requirements for SharedArrayBuffers
    Google systems have recently detected that SharedArrayBuffers (SABs) are used on your website, but COOP and/or COEP headers are not served.

    For Web Compatibility reasons Chrome is planning to require COOP/COEP for the use of SABs from Chrome 91 (2021-05-25) onwards. Please implement ‘cross-origin-isolated’ behavior on your site.

    Our Litespeed report number:
    QULHAUGY

    Best regards,

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Support qtwrk

    (@qtwrk)

    Hi,

    https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/SharedArrayBuffer

    it looks like something to do with JS

    and as of version 3.6.3 , I don’t find this keyword in our source code , it must be coming from your other plugin/theme

    please try do a text search for this keyword

    Best regards,

    Thread Starter lechon

    (@lechon)

    @qtwrk
    Hi, can you be more specific to which keyword you are suggesting? We have done several searches and found nothing yet.

    Best regards,

    Plugin Support qtwrk

    (@qtwrk)

    this word SharedArrayBuffers

    Thread Starter lechon

    (@lechon)

    Hi @qtwrk

    It seems that SharedArrayBuffer is used by React, which is used by Gutenberg, and probably other things.

    React has an outstanding issue for this:

    https://github.com/facebook/react/issues/20829

    On our site we could not pinpoint the direct source of the SharedArrayBuffer.

    After doing some reading on the subject my understanding is that this can be mitigated if we add to the site header the following:

    Cross-Origin-Embedder-Policy: require-corp
    Cross-Origin-Opener-Policy: same-origin

    And we though about implementing this using. htaccess rule like this:

    # Cross-Origin-Embedder-Policy: require-corp
<IfModule mod_headers.c>
  Header set Cross-Origin-Embedder-Policy: "require-corp"
</IfModule>

# Cross-Origin-Opener-Policy: same-origin
<IfModule mod_headers.c>
    Header set Cross-Origin-Opener-Policy: "same-origin"
</IfModule>

    Does implementing this affects in anyway the way Litespeed works?

    Best regards,

    Plugin Support qtwrk

    (@qtwrk)

    Hi,

    no , these directive won’t affect LSCWP

    Best regards,

    Thread Starter lechon

    (@lechon)

    Hi @qtwrk

    Many thanks for the feedback.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Google Console SharedArrayBuffers’ is closed to new replies.