@salesforce-ui-embedding/internal-lightning-ui-embedding 2.2.8-rc.0 → 2.2.9

package/dist/modules/lightning/uiEmbedding/uiEmbedding.js

@@ -7,6 +7,7 @@ import { api, LightningElement } from "lwc";
 
 import { buildBootstrapEnvelope, validateHeartbeat, validateShutdown } from "./utils/bootstrap";
 import { DEFAULT_HEARTBEAT_TIMEOUT_MS, ERROR_CODES, ERROR_PHASES, STATES } from "./utils/constants";
+import { isLightningDomainSameOriginEnabled } from "./utils/gater";
 import { HostBridge } from "./utils/host-bridge";
 import { HOST_INFO } from "./utils/host-info";
 import { createInstrumentation } from "./utils/instrumentation";
@@ -313,10 +314,15 @@ export default class Embedding extends LightningElement {
             };
         }
         const hostOrigin = window.location.origin;
-        if (this._iframeSrcOrigin === hostOrigin && !isLightningDomain(hostOrigin)) {
+        if (
+            this._iframeSrcOrigin === hostOrigin &&
+            !(isLightningDomainSameOriginEnabled() && isLightningDomain(hostOrigin))
+        ) {
             return {
                 code: ERROR_CODES.SAME_ORIGIN_SRC,
-                message: "iframe src origin MUST differ from the host document origin.",
+                message:
+                    "iframe src origin MUST differ from the host document origin, unless the host is a Lightning domain " +
+                    "and the same-origin gate is enabled for it.",
             };
         }
         return null;

package/dist/modules/lightning/uiEmbedding/utils/gater.js

@@ -0,0 +1,15 @@
+/*
+ * Copyright 2026 Salesforce, Inc. All rights reserved.
+ * For full license text, see the LICENSE.txt file in this package.
+ */
+
+import enableLightningDomainSameOriginGate from "@salesforce/gate/com.salesforce.ui-embedding.enableLightningDomainSameOrigin";
+
+/**
+ * Rollout gate for the Lightning-domain exemption from the SAME_ORIGIN_SRC check (W-24243195).
+ * Default closed → the strict "src origin MUST differ from the host origin" rule applies to every host.
+ * Open → a Lightning-domain host may embed a same-origin src. Closing it again is the kill switch.
+ */
+export function isLightningDomainSameOriginEnabled() {
+    return enableLightningDomainSameOriginGate.isOpen({ fallback: false });
+}

package/dist/modules/lightning/uiEmbedding/utils/host-info.js

@@ -3,11 +3,11 @@
  * For full license text, see the LICENSE.txt file in this package.
  */
 
-// `"2.2.8-rc.0"` is a repo-wide ambient declared in /types/globals.d.ts;
+// `"2.2.9"` is a repo-wide ambient declared in /types/globals.d.ts;
 // build.mjs substitutes the literal at build time, jest globals supply a test value.
 
 /** Identity emitted on `ui/notifications/host-initialized`. */
 export const HOST_INFO = {
     name: "lightning-ui-embedding",
-    version: "2.2.8-rc.0",
+    version: "2.2.9",
 };

package/dist/modules/lightning/uiEmbedding/utils/request-router.js

@@ -1,4 +1,4 @@
-function _defineProperty(e, r, t) {return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e;}function _toPropertyKey(t) {var i = _toPrimitive(t, "string");return "symbol" == typeof i ? i : i + "";}function _toPrimitive(t, r) {if ("object" != typeof t || !t) return t;var e = t[Symbol.toPrimitive];if (void 0 !== e) {var i = e.call(t, r || "default");if ("object" != typeof i) return i;throw new TypeError("@@toPrimitive must return a primitive value.");}return ("string" === r ? String : Number)(t);}function o(e) {
+function _defineProperty(e, r, t) {return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e;}function _toPropertyKey(t) {var i = _toPrimitive(t, "string");return "symbol" == typeof i ? i : i + "";}function _toPrimitive(t, e) {if ("object" != typeof t || !t) return t;var r;if ("undefined" != typeof Symbol && void 0 !== (r = t[Symbol.toPrimitive])) {var i = r.call(t, e || "default");if ("object" != typeof i) return i;throw new TypeError("@@toPrimitive must return a primitive value.");}return ("string" === e ? String : Number)(t);}function o(e) {
   return typeof e == "object" && e !== null && !Array.isArray(e);
 }
 function c(e) {

package/dist/modules/lightning/uiEmbedding/utils/sf-embedding-contract.js

@@ -1,4 +1,4 @@
-function _defineProperty(e, r, t) {return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e;}function _toPropertyKey(t) {var i = _toPrimitive(t, "string");return "symbol" == typeof i ? i : i + "";}function _toPrimitive(t, r) {if ("object" != typeof t || !t) return t;var e = t[Symbol.toPrimitive];if (void 0 !== e) {var i = e.call(t, r || "default");if ("object" != typeof i) return i;throw new TypeError("@@toPrimitive must return a primitive value.");}return ("string" === r ? String : Number)(t);} // Bootstrap envelope vocabulary. Spec: EMBEDDING-PROTOCOL.md §3.1, §3.1.1,
+function _defineProperty(e, r, t) {return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e;}function _toPropertyKey(t) {var i = _toPrimitive(t, "string");return "symbol" == typeof i ? i : i + "";}function _toPrimitive(t, e) {if ("object" != typeof t || !t) return t;var r;if ("undefined" != typeof Symbol && void 0 !== (r = t[Symbol.toPrimitive])) {var i = r.call(t, e || "default");if ("object" != typeof i) return i;throw new TypeError("@@toPrimitive must return a primitive value.");}return ("string" === e ? String : Number)(t);} // Bootstrap envelope vocabulary. Spec: EMBEDDING-PROTOCOL.md §3.1, §3.1.1,
 // MC-7/MC-8/MC-10 in §2.2.
 /** Wire identifier for this protocol. Carried verbatim on every bootstrap envelope. */
 const PROTOCOL_NAME = "sf-embedding";

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@salesforce-ui-embedding/internal-lightning-ui-embedding",
-    "version": "2.2.8-rc.0",
+    "version": "2.2.9",
     "private": false,
     "description": "Lightning Base Component (LWC) host for sf-embedding-protocol iframes",
     "license": "SEE LICENSE IN LICENSE.txt",
@@ -22,8 +22,8 @@
     },
     "devDependencies": {
         "@salesforce/jsonrpc": "^10.12.3",
-        "@salesforce/sf-embedding-contract": "2.2.8-rc.0",
-        "utils": "2.2.8-rc.0"
+        "@salesforce/sf-embedding-contract": "2.2.9",
+        "utils": "2.2.9"
     },
     "sideEffects": false,
     "publishConfig": {