Skip to content

fix: leave focus in the parent page from an unfocused iframe - #17297

Merged
teemingc merged 2 commits into
mainfrom
iframe-focus
Oct 13, 2026
Merged

teemingc merged 2 commits into
mainfrom
iframe-focus

Conversation

@Nic-Polumeyv

Copy link
Copy Markdown
Member

Fixes #17283

A native page load inside an iframe never takes focus from the parent page, in Chromium, Firefox or WebKit.

@pkg-svelte-dev

pkg-svelte-dev Bot commented Oct 1, 2026 •

Copy link
Copy Markdown

Install the latest version of @sveltejs/kit from 8014f8b:

pnpm add https://pkg.svelte.dev/@sveltejs/kit/c/8014f8b595b70df0bf0d2e27681c7db810ed50b9

Open in pkg.svelte.dev: https://pkg.svelte.dev/repos/kit/pr/17297

@changeset-bot

changeset-bot Bot commented Oct 1, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 7ed6efc

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 10 packages
Name Type
@sveltejs/kit Patch
@sveltejs/adapter-auto Patch
@sveltejs/adapter-bun Patch
@sveltejs/adapter-cloudflare Patch
@sveltejs/adapter-netlify Patch
@sveltejs/adapter-node Patch
@sveltejs/adapter-static Patch
@sveltejs/adapter-vercel Patch
@sveltejs/enhanced-img Patch
@sveltejs/package Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@svelte-docs-bot

Copy link
Copy Markdown

@teemingc
teemingc merged commit c7e59b3 into main Oct 13, 2026
41 checks passed
@teemingc
teemingc deleted the iframe-focus branch October 13, 2026 14:45
@github-actions github-actions Bot mentioned this pull request Oct 13, 2026
teemingc added a commit that referenced this pull request Oct 14, 2026
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## @sveltejs/kit@3.1.0

### Minor Changes

- feat: support `report-sha256`/`report-sha384`/`report-sha512` CSP
hash-reporting keywords
([#17398](#17398))

- feat: emit a `sveltekit.endpoint` span for `+server` handlers when
server tracing is enabled
([#17325](#17325))

### Patch Changes

- fix: don't treat every module as server-only when the project is
inside a `server` directory
([#17376](#17376))

- fix: continue deployment recovery when service worker updates fail
([#17440](#17440))

- fix: infer prerendered MIME types from generated files
([#17381](#17381))

- fix: leave generated files alone when their contents are unchanged
([#17310](#17310))

- fix: leave focus in the parent page when an app in an unfocused iframe
starts or navigates
([#17297](#17297))

- fix: don't warn about Storybook's Vite plugins that use
`transformIndexHtml`
([#17373](#17373))
## @sveltejs/adapter-cloudflare@8.0.1

### Patch Changes

- fix: start the dev server on runtimes such as Deno that define
`caches` as a getter-only global
([#17401](#17401))

- fix: start one platform proxy for concurrent Vite servers and keep it
alive until the last one closes
([#17368](#17368))

- fix: support `Span#setStatus` and `Span#updateName` on local emulation
of Cloudflare `tracing`
([#17400](#17400))
- Updated dependencies:
  - @sveltejs/kit@3.1.0
## @sveltejs/adapter-vercel@7.0.1

### Patch Changes

- fix: keep the detected Bun minor in the resolved runtime
([#17331](#17331))
- Updated dependencies:
  - @sveltejs/kit@3.1.0
## @sveltejs/package@3.0.1

### Patch Changes

- fix: emit component types for the installed Svelte version, rather
than the oldest one the `svelte` dependency range allows
([#17330](#17330))

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Tee Ming <chewteeming01@gmail.com>
dadezzz pushed a commit to dadezzz/events-cash-register that referenced this pull request Oct 18, 2026
This PR contains the following updates:

| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [@sveltejs/kit](https://svelte.dev) ([source](https://github.com/sveltejs/kit/tree/HEAD/packages/kit)) | [`3.0.1` → `3.1.0`](https://renovatebot.com/diffs/npm/@sveltejs%2fkit/3.0.1/3.1.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@sveltejs%2fkit/3.1.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@sveltejs%2fkit/3.0.1/3.1.0?slim=true) |

---

### Release Notes

<details>
<summary>sveltejs/kit (@&#8203;sveltejs/kit)</summary>

### [`v3.1.0`](https://github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#310)

[Compare Source](https://github.com/sveltejs/kit/compare/@sveltejs/kit@3.0.1...@sveltejs/kit@3.1.0)

##### Minor Changes

- feat: support `report-sha256`/`report-sha384`/`report-sha512` CSP hash-reporting keywords ([#&#8203;17398](sveltejs/kit#17398))

- feat: emit a `sveltekit.endpoint` span for `+server` handlers when server tracing is enabled ([#&#8203;17325](sveltejs/kit#17325))

##### Patch Changes

- fix: don't treat every module as server-only when the project is inside a `server` directory ([#&#8203;17376](sveltejs/kit#17376))

- fix: continue deployment recovery when service worker updates fail ([#&#8203;17440](sveltejs/kit#17440))

- fix: infer prerendered MIME types from generated files ([#&#8203;17381](sveltejs/kit#17381))

- fix: leave generated files alone when their contents are unchanged ([#&#8203;17310](sveltejs/kit#17310))

- fix: leave focus in the parent page when an app in an unfocused iframe starts or navigates ([#&#8203;17297](sveltejs/kit#17297))

- fix: don't warn about Storybook's Vite plugins that use `transformIndexHtml` ([#&#8203;17373](sveltejs/kit#17373))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNjUuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE2NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

IFrame highjacking focus from parent window on load

2 participants