fix(core): Return early in core.js if it's inside an iframe (#10300)

* fix(core): Return early in core.js if it's inside an iframe

* ipc.js

.changes/fix-init-script-iframe.md

@@ -0,0 +1,5 @@
+---
+tauri: "patch:bug"
+---
+
+Fixed an issue causing native apis such as `window.alert` to break inside iframes on Windows.

core/tauri/scripts/core.js

@@ -7,15 +7,20 @@
     return window.crypto.getRandomValues(new Uint32Array(1))[0]
   }
 
+  const osName = __TEMPLATE_os_name__
+  const protocolScheme = __TEMPLATE_protocol_scheme__
+
+  // Workaround for webview2 injecting scripts into subframes, unlike webkitgtk/wkwebview.
+  if (osName === 'windows' && window.location !== window.parent.location) {
+    return
+  }
+
   if (!window.__TAURI__) {
     Object.defineProperty(window, '__TAURI__', {
       value: {}
     })
   }
 
-  const osName = __TEMPLATE_os_name__
-  const protocolScheme = __TEMPLATE_protocol_scheme__
-
   window.__TAURI__.convertFileSrc = function convertFileSrc(filePath, protocol = 'asset') {
     const path = encodeURIComponent(filePath)
     return osName === 'windows'

core/tauri/scripts/ipc.js

@@ -7,7 +7,13 @@
  */
 
 ;
-(function() {
+(function () {
+  // Workaround for webview2 injecting scripts into subframes, unlike webkitgtk/wkwebview.
+  const osName = __TEMPLATE_os_name__
+  if (osName === 'windows' && window.location !== window.parent.location) {
+    return
+  }
+
   /**
    * @type {string}
    */

core/tauri/src/hooks.rs

@@ -36,6 +36,7 @@ pub type OnPageLoad<R> = dyn Fn(Window<R>, PageLoadPayload) + Send + Sync + 'sta
 pub(crate) struct IpcJavascript<'a> {
   pub(crate) isolation_origin: &'a str,
   pub(crate) invoke_key: &'a str,
+  pub(crate) os_name: &'a str,
 }
 
 #[cfg(feature = "isolation")]

core/tauri/src/manager.rs

@@ -455,6 +455,7 @@ impl<R: Runtime> WindowManager<R> {
         _ => "".to_string(),
       },
       invoke_key: self.invoke_key(),
+      os_name: std::env::consts::OS,
     }
     .render_default(&Default::default())?;