The Hub lives on a Google address today, so a Google app inside it is Google-inside-Google. Move the Hub to hub.jasonridleyagency.com and every one of those apps becomes third-party. This page finds out what that costs, before any of V2 is built on the assumption that it costs nothing.
Nothing on this page is measured automatically, on purpose. The browser will not let one site read what happened inside another site’s frame — that is the rule that keeps the web safe, and it applies here too. So the page puts the three apps under identical conditions and records your machine exactly; the answers are yours. A page that guessed would hand you a green matrix nobody checked.
Runs as the owner, so the viewer’s own Google session matters least. If even this fails, nothing Apps Script can be framed.
Paste the URL above and press Enter.
First, open this URL in a NEW TAB on this machine. Does it work there?
Do this before looking at the frame. If it fails in a plain tab it is not the frame’s fault — most often two Google accounts are signed into this browser and the wrong one is the default. Everything below is meaningless until this is Yes.
Does the app appear in the frame?
A blank white frame usually means the app is missing setXFrameOptionsMode(ALLOWALL), or the URL ends /dev or /edit instead of /exec.
Does it actually load its data?
GIVE IT TWENTY SECONDS. Apps Script is slow to wake and three of these are starting at once. A spinner still going after a minute is a failure; a slow one is not.
Can you do something that writes?
Change a filter, save a field — anything that goes back to the server and comes back.
HomeApps Script · Execute as: User accessingdecides it
THE ONE THAT DECIDES IT. Google has to work out who is looking from inside a frame on our domain, and may need to show a consent screen there. Tasks and Calendar are set up the same way.
Paste the URL above and press Enter.
First, open this URL in a NEW TAB on this machine. Does it work there?
Do this before looking at the frame. If it fails in a plain tab it is not the frame’s fault — most often two Google accounts are signed into this browser and the wrong one is the default. Everything below is meaningless until this is Yes.
Does the app appear in the frame?
Does it load YOUR data — your name, your items?
Not just any data. If it shows somebody else’s, or none, the identity did not survive the frame. Again, give it twenty seconds first.
If it asked for permission, could you finish that here?
Only happens the first time, or on a machine that has never opened Home. If no prompt appeared, answer N/A. This is the question a SECOND PERSON answers best — yours was granted long ago.
Can you do something that writes?
Support DeskVercel · same site as the Hubshould get easier
On hub.jasonridleyagency.com this stops being cross-site, which should make it EASIER, not harder. Here to prove that rather than assume it.
First, open this URL in a NEW TAB on this machine. Does it work there?
Do this before looking at the frame. If it fails in a plain tab it is not the frame’s fault — most often two Google accounts are signed into this browser and the wrong one is the default. Everything below is meaningless until this is Yes.
Does the desk appear in the frame?
If it is blank, its CSP frame-ancestors does not list this page yet — a known change the desk needs, not a failure of the idea.
Are you signed in, or looking at a sign-in button?
The Hub pass does not exist yet at v0.1, so a sign-in button here is EXPECTED. What matters is whether signing in works.
Press F5 to reload this WHOLE page — not just the frame. Still signed in?
Reload the spike itself, not right-click → Reload frame: those measure different things. This is the question the whole move is meant to fix.
When you are done0 of 13 answered
Copy the result and paste it back into the chat. Then run it again in the other cookie mode, and once on somebody else’s PC — the second person matters most, because a machine that has never opened Home is the only way to see the first-run consent screen.
13 still unanswered — you can copy anyway, it says which.