Mercado Pago Issues (WooCommerce) OAuth flow iframe/CSP issue
-
Hi,
I’m running a WordPress Multisite with WooCommerce and the official Mercado Pago plugin.
When I try to switch / reconnect the Mercado Pago account from wp-admin, the flow fails. Adminify seems to open the MercadoLibre/MercadoPago authorization flow inside an internal Adminify “window” (it behaves like an embedded view/iframe or a wrapped navigation). MercadoLibre blocks being embedded due to CSP (
frame-ancestors 'none'), so the screen shows “connection refused” and the process cannot continue.In the browser console I get errors like:
Framing 'https://www.mercadolibre.com/' violates Content Security Policy directive: "frame-ancestors 'none'".Blocked a frame with origin 'https://<my-domain>' from accessing a cross-origin frame.
Also, when I temporarily disable Adminify only for that page, after Mercado Pago redirects back to wp-admin the backend UI becomes duplicated (Adminify panel + native WP admin panel nested), which breaks the admin experience.
Could you please advise:
- Is there a way to force external auth flows (OAuth) to open in a top-level window / new tab instead of being embedded/wrapped by Adminify?
- Is there a supported way to disable Adminify for a specific plugin page (Mercado Pago settings) without causing the “double admin” UI after redirects?
- If there’s a compatibility setting (disable ajax navigation, disable embedded views, etc.) for specific URLs, what is the recommended approach?
Thanks.
You must be logged in to reply to this topic.