I have this situation:
A page from http://desktop.ourdomain.local contains an iframe with src="http://legacy-application.ourdomain.local"
http://legacy-application.ourdomain.local, makes extensive use of alerts and prompts, which worked fine until google released chrome 92, which states that this is no more an option (see https://www.chromestatus.com/feature/5148698084376576)
Tried many things among those explained here
And many trials about CORS, and many combinations of iframe sandboxing (allow-same-origin allow-scripts allow-modal ...)
Did anybody run into the same problem, and solved ?