Duplicate: https://news.ycombinator.com/item?id=28055160

I don't think this is a duplicate. This story is reporting on how Chromium is (at least, temporarily) restoring support for alert/prompt/confirm from cross-origin iframes.

The story itself even points back to that!

Happening on GitHub for ages too

See also https://news.ycombinator.com/item?id=26908076 "GitHub Actions update: Helping maintainers combat bad actors" (GitHub blog)