We have a phone system integrated with Salesforce using OpenCTI and I'm looking for a solution to this: https://sites.google.com/a/chromium.org/dev/Home/chromium-security/deprecating-permissions-in-cross-origin-iframes
Once Chrome 63 is rolled out it will no longer by default give permission for certain privileges such as microphone access to cross origin iframes. My understanding is this will prevent the mic from working in our softphone. I don't have much experience with CTI implementation and wasn't involved in the setup of this system so I'm flying a bit blind here. The phone system dev has suggested we need to update the Salesforce iframe tag or add an http header to include an allow attribute for microphone - the link above presents the example:
<iframe src="https://example.com" allow="geolocation; microphone; camera"></iframe>
I've looked around and from what I can see there's nowhere in Salesforce to configure the CTI iframe at this level. We are not using a softphone layout in Salesforce, just an external one hosted by the phone system. We have custom classes and a custom visualforce screen pop on call connection but I don't think they're of any use to this issue.
Is this something we can solve in Salesforce, or does it require changes in the CTI adapter?